Evidence row 126951

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://x402.tokenizen.nl/api/vuln-search"
    ]
  ],
  "name": "x402.tokenizen.nl/api/vuln-search",
  "owner_address": "0x015eb036560216b3051339061ff68a207e0fe88f",
  "raw": {
    "accepts": [
      {
        "amount": "5000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxAmountRequired": "5000",
        "maxTimeoutSeconds": 300,
        "network": "eip155:8453",
        "payTo": "0x015Eb036560216B3051339061FF68A207E0fe88f",
        "scheme": "exact"
      }
    ],
    "description": "tokenizen vulnerability pattern search, 1032 exact-reconciled findings from 10 Sherlock contests",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "q": "oracle price manipulation"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "contests": 10,
              "note": "acceptance_rate is the historical share of findings of this pattern that were accepted on Sherlock. It is a record of past outcomes, not a prediction for a new submission.",
              "platforms": "Sherlock + Code4rena",
              "query": "oracle price manipulation",
              "results": [
                {
                  "acceptance_rate": 0.5,
                  "accepted": 55,
                  "examples_accepted": [
                    "title of an accepted finding, as returned by the live endpoint"
                  ],
                  "examples_rejected": [
                    "title of a rejected finding, as returned by the live endpoint"
                  ],
                  "pattern": "oracle-manipulation",
                  "sherlock_rate": 0.53,
                  "total_findings": 109
                }
              ],
              "source": "tokenizen-knowledge-base",
              "total_findings": 1032
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "body": {
                  "type": "object"
                },
                "bodyType": {
                  "type": "string"
                },
                "method": {
                  "enum": [
                    "GET",
                    "POST"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "additionalProperties": {
                    "type": "string"
                  },
                  "properties": {},
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type",
                "example"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      },
      "piprail": {
        "client": {
          "note": "No proprietary client is required. Any x402 client that implements the exact scheme on eip155:8453 can pay this endpoint."
        },
        "docs": {
          "agents": "https://github.com/holistis/agent-receipt-verify",
          "home": "https://tokenizen.nl",
          "pay": "https://x402.org"
        },
        "instruction": "tokenizen x402 payment endpoint. Pay 0.005 USDC on eip155:8453 to 0x015Eb036560216B3051339061FF68A207E0fe88f with an EIP-3009 signature in the PAYMENT-SIGNATURE header. The receipt you get back can be verified independently with npx -y agent-receipt-verify. Docs: https://tokenizen.nl.",
        "name": "tokenizen vulnerability pattern search",
        "pay": [
          {
            "amount": "5000",
            "amountFormatted": "0.005",
            "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
            "how": "Sign an EIP-3009 transferWithAuthorization for this amount to payTo and resubmit with the PAYMENT-SIGNATURE header. Any x402 client that speaks the exact scheme works.",
            "network": "eip155:8453",
            "payTo": "0x015Eb036560216B3051339061FF68A207E0fe88f",
            "scheme": "exact",
            "symbol": "USDC"
          }
        ],
        "protocol": "x402",
        "verify": {
          "note": "The receipt this endpoint returns can be checked independently, without trusting us.",
          "source": "https://github.com/holistis/agent-receipt-verify",
          "tool": "npx -y agent-receipt-verify"
        },
        "version": "2",
        "what": "This is an x402 \"402 Payment Required\" endpoint. Pay one of the offered rails to access it."
      }
    },
    "lastUpdated": "2026-10-22T21:06:19.867Z",
    "quality": {
      "l30DaysTotalCalls": 20,
      "l30DaysUniquePayers": 7,
      "lastCalledAt": "2026-10-22T21:06:19.442Z"
    },
    "resource": "https://x402.tokenizen.nl/api/vuln-search",
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "tokenizen vulnerability pattern search, 1032 exact-reconciled findings from 10 Sherlock contests"
}

What the leaf hashes

{"body":"a437cab982af161847437af00ba8cd3a47025c9ade9e9361ae9de9536547345a","id":126951,"kind":"listing","method":"baseline/1","observed_us":1793025637290818,"prev":null,"subject":"x402_bazaar:https://x402.tokenizen.nl/api/vuln-search","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0xa6c56846e9ae18108e5cd76b48fd18d9443f5897d64c8cbc9eeca54be11dee49
2. 0x97b0e352185752b39e27f5576e46c201b8877e0d4db694316b8f99a021af2b19
3. 0xd1201f3c7904efe41164e0affa5ff92b632024c42e7cea169ba7ffc763f8397b
4. 0x66c6f15d982d22880a51588adc0d35c1f5bc5e9892bdffec378e8a843ca4f35d
5. 0xccc74a964cb83f65ead9d793cfaff2c273aaee3c90d185dd1fc3c2c5e947e4a1
6. 0x3fe13cf24b0d09a52673c1634701d57d597c9dbcc3eb95afc1a878e08d57e4bd
7. 0x6335ec7f29e08d326d280a1b05175987cfc5a92c5f2bbd9b205808f9f8f59428
8. 0x27c8b5fa5b5fb6753775709daf8bac19c9224f74e32e3fee48eaea6f5a4d9737
9. 0xe6ee0f234ffe56205700b1e8dd7802c20485340595800c1900625aea4c3ff77f
10. 0x8898ab8e9245665c91957f93ced1d4675156754992f0651eb80aa5869ec8fd1b
11. 0xf9b4ada16aca6f9b63c09b94519008e1b94357a9d352c245023758b56b82d0b1
12. 0x1e464fcb484a1e782f9fe44be5118a9de934eb533c96ba10fc7d20e3a3e4711c
13. 0x292ebdce6b8d3d7ef08ad646a0fd97dee9313ab55c1a350807d9f3013794c37a
14. 0x428106f4ae4ec142f17aebf6fa50935242f8d3f1c211cf95d6351d03d11da2b7
15. 0x62a900133713919f4eed33d8336876b7a6d538233b8a4f3ed03b29aa44f5bad0
16. 0x1ac20d30773e1f4f2f811540e9a99b5cca9177c9e2e029acc0d80cf3f1d11f0f
17. 0xd21942ae3214eff88e08ab04884fd4b11958b51af9a0741b7668e2d07a2c56c9
18. 0x9a9024edb5069d88a324facb310a5ce8e495214bbaa968f077bede437390194f
19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae