← The evidence ledger
Evidence row 2202160
Observed , by sync.x402_bazaar/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://vuln-intel.x402tookit.com/epss-score
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- 2f411a43f0882f25b408074e44cb29ea8360b293a0a31ea143bd1b97d15a55d4
- Leaf
- 0x20c415d01f4b188fdbc65399de0424e7ad3feeba5e6039acd2a70a5f81c74a28
What was observed
{
"endpoints": [
[
"x402",
"https://vuln-intel.x402tookit.com/epss-score"
]
],
"name": "Vulnerability Intelligence",
"owner_address": "0xb531320805c5bed1d46aeadcf4f008fdf172dbda",
"raw": {
"accepts": [
{
"amount": "20000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:8453",
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"scheme": "exact"
},
{
"amount": "20000",
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM",
"transactionVersions": [
0
]
},
"maxTimeoutSeconds": 300,
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "DUPiupXtuox38dcGoXUKer5mAydCzmaHjrbQ66qeEm8s",
"scheme": "exact"
},
{
"amount": "20000",
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:137",
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"scheme": "exact"
},
{
"amount": "20000",
"asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:42161",
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"scheme": "exact"
}
],
"description": "EPSS exploit-probability score and percentile for up to 10 CVEs, ranked, with a high/elevated/low verdict.",
"extensions": {
"bazaar": {
"info": {
"input": {
"method": "GET",
"queryParams": {
"cves": "CVE-2021-44228,CVE-2023-4863"
},
"type": "http"
},
"output": {
"example": {
"asOf": "2026-10-23T03:17:23.209Z",
"degraded": false,
"disclaimer": "Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting.",
"notChecked": [
"actual exploitation (see /kev-check)",
"severity"
],
"reasons": [
"EPSS estimates the chance of exploitation activity in the next 30 days; it is not severity.",
"EPSS is provided by FIRST (first.org/epss)."
],
"scores": [
{
"asOf": "2026-10-22",
"cve": "CVE-2021-44228",
"percentile": 1,
"probability": 0.99999
},
{
"asOf": "2026-10-22",
"cve": "CVE-2023-4863",
"percentile": 0.99981,
"probability": 0.99979
}
],
"source": "FIRST EPSS",
"sourceUrl": "https://api.first.org/data/v1/epss",
"summary": "Highest: CVE-2021-44228 at 100% (percentile 100).",
"thresholds": {
"elevatedAtLeast": 0.1,
"highAtLeast": 0.5
},
"verdict": "HIGH_EXPLOIT_PROBABILITY"
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"properties": {
"cves": {
"description": "Comma-separated CVE ids, up to 10",
"type": "string"
}
},
"required": [
"cves"
],
"type": "object"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"properties": {
"asOf": {
"type": [
"null",
"string"
]
},
"degraded": {
"type": [
"boolean",
"null"
]
},
"disclaimer": {
"type": [
"null",
"string"
]
},
"notChecked": {
"items": {
"type": "string"
},
"type": [
"array",
"null"
]
},
"reasons": {
"items": {
"type": "string"
},
"type": [
"array",
"null"
]
},
"scores": {
"items": {
"properties": {
"asOf": {
"type": [
"null",
"string"
]
},
"cve": {
"type": [
"null",
"string"
]
},
"percentile": {
"type": [
"null",
"number"
]
},
"probability": {
"type": [
"null",
"number"
]
}
},
"type": "object"
},
"type": [
"array",
"null"
]
},
"source": {
"type": [
"null",
"string"
]
},
"sourceUrl": {
"type": [
"null",
"string"
]
},
"summary": {
"type": [
"null",
"string"
]
},
"thresholds": {
"properties": {
"elevatedAtLeast": {
"type": [
"null",
"number"
]
},
"highAtLeast": {
"type": [
"null",
"number"
]
}
},
"type": [
"null",
"object"
]
},
"verdict": {
"type": [
"null",
"string"
]
}
},
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
},
"lastUpdated": "2026-11-01T22:39:41.263Z",
"quality": {
"l30DaysTotalCalls": 2,
"l30DaysUniquePayers": 1,
"lastCalledAt": "2026-11-01T22:39:40.969Z"
},
"resource": "https://vuln-intel.x402tookit.com/epss-score",
"serviceName": "Vulnerability Intelligence",
"tags": [
"epss",
"cve",
"exploit-probability"
],
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "EPSS exploit-probability score and percentile for up to 10 CVEs, ranked, with a high/elevated/low verdict."
}What the leaf hashes
{"body":"2f411a43f0882f25b408074e44cb29ea8360b293a0a31ea143bd1b97d15a55d4","id":2202160,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793646813531153,"prev":null,"subject":"x402_bazaar:https://vuln-intel.x402tookit.com/epss-score","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (444186 rows).
- 0x20c3b0c2f5f6271dc5faf824f263b440586c35284ccfbd1c2f271b881a17cb19
- 0x61e418ec59068e6cbb0c31b8fab1fc9d62313c21fb11465af96a7701a54372c3
- 0x7db0d313a55250d3a36af9e4781d30bde25b248c73fdb69292a7ab136387911c
- 0xd8cd64439866fbbdf7869e25b319b87b92ad27865880c44bbf06a5c390d82b7f
- 0xbd821b9c4c3b6a640dd2c9d946f963484efbafebf05aeb1bf2bd22405892acd4
- 0x9fc250e6a538a4f63401dd7628fa46422a469784944fc70356101b3366132321
- 0xd32bdef3edda7a78b5c4a1098450bdfded69da52df885b339a36aed0b4194d66
- 0x65f68ccbb3c22db8cfd0eb7628f89f6ff2ae9fbca22c4c49fb02341d69216e08
- 0x632341670db8db822a78f37a28d006e4acb1a972d4538a81334cdef3bd6a3800
- 0x610e10c8d4b54f541294cd8c62f5267847fecd6a782f4f5d3521978fff3ce086
- 0x193993dfc99f07e76a7959bf301447a777bda89110f903e9197b34093694d0e4
- 0x0287e9d9530add05d7480c4266f19be69f45ecae1d0e3ec844ff635060819eb8
- 0x350e03a59bf81961fd9ce694f08f9ba0239d9ea2496b0c0dc7998c9e9855326f
- 0xc63937235d47ff2107de3051477e395be67b96d91d1349c787bf4b1ef91b602f
- 0xcd21ec8d72a18a2d4513e4fd309abbb530810fb1dbeecd4b9b85acb4d6ff8f12
- 0xac40f077ca4be8c3432a67771725cc315e8101fc2649999cfad2c900a7640e27
- 0x53a741b69e9e51c4a288a74712aa6ac3fb28c8923cd3e6461d161c4f2d48b31a
- 0x050f2978b537f7afb21ee1551577cdf146d1c56f4df12d24315ae5e69366b0a4
- 0x365b161a4b68d750dcc4b3ecce1154a2163c87b08762079428e68f0ebb6a754e
- Day root
- 0x78fecaabbe319e56f5c4b80fc02e2052e198ad24781da8832a475ff65f2002d1
- Chained
- 0xdc35957db5d1371ca382b9152878ffece28ec7c5cb4f98fd71ddb367f8b999b2
- Published
- On Arc Testnet, block 70432815: 0x56b814612eb2e3e544153df3e91e1f7199106d1e430c7d8c6b653feeb9ebe9af