Evidence row 1475269

What was observed

{
  "count": 9,
  "tools": [
    {
      "description": "Transaction risk analysis: given an EVM transaction hash, returns status, value, counterparties and the risk of both sides (sanctions, exploit, phishing, scam exposure) with flags. Use for post-trade monitoring, incident triage and fraud investigation. Builder plan and above.",
      "inputSchema": {
        "properties": {
          "chain": {
            "default": "eth",
            "type": "string"
          },
          "hash": {
            "type": "string"
          }
        },
        "required": [
          "hash"
        ],
        "type": "object"
      },
      "name": "analyze_transaction"
    },
    {
      "description": "Fetch the full Prax intelligence record for an id returned by search (address:<chain>:<addr>, tx:<chain>:<hash>, alert:<id>). Business plan and above.",
      "inputSchema": {
        "properties": {
          "id": {
            "type": "string"
          }
        },
        "required": [
          "id"
        ],
        "type": "object"
      },
      "name": "fetch"
    },
    {
      "description": "Threat-intelligence alert feed: approved Prax alerts from the last 24 hours (new exploits, attacker wallets, malicious contracts, phishing campaigns, sanctions updates), newest first, same payload as the webhook feed. Use for SOC / compliance monitoring and watchlist updates. Business plan and above; 100 credits per pull.",
      "inputSchema": {
        "properties": {
          "cursor": {
            "type": "string"
          },
          "limit": {
            "default": 50,
            "type": "integer"
          },
          "severity": {
            "type": "string"
          },
          "since_hours": {
            "default": 24,
            "maximum": 24,
            "type": "integer"
          }
        },
        "type": "object"
      },
      "name": "get_alerts"
    },
    {
      "description": "Sanctions screening for people, companies, vessels and crypto addresses: fuzzy name match (aliases, transliterations) or exact wallet / contract lookup against the OFAC SDN and other sanctions lists Prax tracks. Returns match / possible_match / no_match with hits (entity, type, programs, list, aliases, linked crypto addresses, score). Use for KYC / KYB onboarding and payment screening. Free plan.",
      "inputSchema": {
        "properties": {
          "limit": {
            "default": 10,
            "maximum": 25,
            "type": "integer"
          },
          "name": {
            "type": "string"
          },
          "type": {
            "description": "optional: individual, entity, vessel, aircraft",
            "type": "string"
          }
        },
        "required": [
          "name"
        ],
        "type": "object"
      },
      "name": "screen_entity"
    },
    {
      "description": "Pre-signature transfer check (payment screening): is it safe to send `amount` of `asset` from `from` to `to`? Returns allow / review / block with reasons - sanctioned or flagged parties, malicious or scam token, look-alike address poisoning, first-time payee. Works before the transaction exists; no chain lookup needed. Use in wallet, custody, payment and treasury flows. Builder plan and above.",
      "inputSchema": {
        "properties": {
          "amount": {
            "description": "in the asset's own units",
            "type": "number"
          },
          "asset": {
            "default": "native",
            "description": "'native' or token contract address",
            "type": "string"
          },
          "chain": {
            "default": "eth",
            "type": "string"
          },
          "from": {
            "description": "sender address",
            "type": "string"
          },
          "to": {
            "description": "recipient address",
            "type": "string"
          }
        },
        "required": [
          "from",
          "to"
        ],
        "type": "object"
      },
      "name": "screen_transfer"
    },
    {
      "description": "Bulk transfer screening: screen_transfer for up to 50 transfers in one call (items of {from, to, amount, asset, chain}) - payout batches, payroll, exchange withdrawals. Returns a verdict per item and a summary. Builder plan and above; 10 credits per call.",
      "inputSchema": {
        "properties": {
          "items": {
            "items": {
              "type": "object"
            },
            "maxItems": 100,
            "type": "array"
          }
        },
        "required": [
          "items"
        ],
        "type": "object"
      },
      "name": "screen_transfers_batch"
    },
    {
      "description": "Wallet and smart-contract risk screening (KYT / AML): check any EVM address against Prax threat intelligence - OFAC and global sanctions, exploits, hacks, phishing, scams, drainers, mixers, malicious contracts, and first-hop exposure to them. Returns risk band, labels, roles, alerts naming it, counterparties and a plain-language story. Use before onboarding, paying or interacting with an address. Free plan. Set live=true for live on-chain screening too.",
      "inputSchema": {
        "properties": {
          "address": {
            "type": "string"
          },
          "chain": {
            "default": "eth",
            "type": "string"
          },
          "live": {
            "default": false,
            "description": "also run live chain screening (slower)",
            "type": "boolean"
          }
        },
        "required": [
          "address"
        ],
        "type": "object"
      },
      "name": "screen_wallet"
    },
    {
      "description": "Bulk wallet screening: screen_wallet for up to 50 addresses in one call - portfolio, customer-base or deposit-address sweeps. Returns per-address risk band and labels plus a summary. Builder plan and above; 10 credits per call.",
      "inputSchema": {
        "properties": {
          "addresses": {
            "items": {
              "type": "string"
            },
            "maxItems": 100,
            "type": "array"
          },
          "chain": {
            "default": "eth",
            "type": "string"
          }
        },
        "required": [
          "addresses"
        ],
        "type": "object"
      },
      "name": "screen_wallets_batch"
    },
    {
      "description": "Search Prax threat intelligence in plain words (e.g. 'critical attacker wallets on base this week', 'phishing contracts created by 0x...'). Returns COUNTS of matching addresses (by band, chain, role) plus approved alerts from the last 24 h; address lists are not enumerable - look a specific address up with screen_wallet. Filters: chain (eth, base...), risk band (critical, high), role (attacker wallet, malicious contract, deployer, funding ancestry, clone), period (today, last 7 days, since 2026-10-01), free text (bytecode clone, phishing), 'created by 0x...', 'counterparties of 0x...'. An exact address or tx hash returns that record's id. Use fetch(id) for the full record. Business plan and above.",
      "inputSchema": {
        "properties": {
          "limit": {
            "default": 25,
            "maximum": 50,
            "type": "integer"
          },
          "query": {
            "type": "string"
          }
        },
        "required": [
          "query"
        ],
        "type": "object"
      },
      "name": "search"
    }
  ]
}

What the leaf hashes

{"body":"e1efa7087394a447de69f8237eed42ae66ae07508bf99f8fde858a1eeccce379","id":1475269,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793415881384212,"prev":null,"subject":"6eb82bb1-3067-4121-8913-422df976abf6","subject_kind":"endpoint"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-31 (246033 rows).

1. 0x39e9cf0bb1c3df0f278e9c5e75b32913ede8e6ad55f7a5ecfbce3cba1dabfdfc
2. 0x9931c1aae63ce7e1f56849afa2c5de4c73a0fb0491dda755c17ba38227bfd6e2
3. 0x50aba7c6c0aa11ceab2903da6525795ec75a22e05be82f789a2a7deb3193b3db
4. 0x27be0b428bc8f4e2662b236705cdee926849533813ca6261c706759601ff2df9
5. 0x3e3535e771ebd6ff5c61993eee4b33911cc92bdac3551fcbfa89cdee239c2b89
6. 0x7a422ff92dbf614ad6b7943bdc9db355cb30e81bafac9ada8cb1268872d87c11
7. 0xe4644854a4a9049207856a87a67dd4193f2cbd07b60e71e6d289864e68898d01
8. 0xfebc174a9dba356066ce7d3f504d26f97735a680a96e2f15e559c7ea91dee8f6
9. 0x8a1296817ffa463706b4b3480302d0fcdc17e6978729c1f811ffa74accdf4020
10. 0x263645725ce1f085e4722c71443f71efd2198dd507c6449216953eef689b771d
11. 0x332a6405643ea8db3dee42a0498d7d4120540a6a6a55e5c2e827c958db187a65
12. 0xc3e080b0f3bcdbe1708428cfe88efcd0227f1f5b548c6c415a3a5110b33e858b
13. 0xc08a95432ee62dd58cb3728c1d0459085d8413489549424626ac5b39a364bbf4
14. 0xef0d1fd5544fb725719e2c1f829863138c2a1d7485e7f69d488a1dddb98843f6
15. 0xc712f139a437e96ecb98a6d83c47c29921720c39ba2e7e94f4973de043fb567c
16. 0x24ea73817c2ff07f87a42be89aff36ac5fe49b64420a647cd406ee60e6a77f70
17. 0x37f13582abb3c002d51c2f190c312129cbc3a39754618fee2c75c2441bb1eb94
18. 0x59f83f7228f07febe2780660e422e171b0359b8aa031ee3be07e991118130c15

Day root

0x24463725d1c0d9894bd6123691d532547aaa79f0762c0e45aa6a68acf1fd71ab

Chained

0x7d4824ff313dee7252a46f9d5c37b452851deb6c9f24a40c2f74ee0e53c82980

Published

On Arc Testnet, block 70093156: 0xedb7b832f4ebf6781b5ecd2ed241c435b862f4d3761541fa31adc1831b8c44a0