Evidence row 3765161

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://telesint-api.onrender.com/vulnerability"
    ]
  ],
  "name": "telesint-api.onrender.com/vulnerability",
  "owner_address": "0x7f74ce6d34ee0180f0217a16ce05f3b91272570f",
  "raw": {
    "accepts": [
      {
        "amount": "30000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:8453",
        "payTo": "0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F",
        "scheme": "exact"
      }
    ],
    "description": "CVE and exploitation-in-the-wild signals from Telegram CTI channels. Filters: severity, min_confidence, since, tag(cve|exploit|poc|patch), ttp, type(cve), limit, offset. Returns CVE IDs, affected products, exploit status.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "limit": 20,
              "min_confidence": 60,
              "offset": 0,
              "severity": "high",
              "since": "2026-05-01T00:00:00Z",
              "tag": "cve",
              "type": "cve"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "endpoint": "vulnerability",
              "items": [
                {
                  "category": "vulnerability",
                  "channel": "https://t.me/vxunderground",
                  "confidence": 91,
                  "id": "v1u2l3n4-5678-90ab-cdef-vuln56789012",
                  "iocs": [
                    {
                      "context": "Critical RCE in PAN-OS",
                      "type": "cve",
                      "value": "CVE-2026-1234"
                    },
                    {
                      "context": "PoC repository",
                      "type": "url",
                      "value": "https[://]github[.]com/exploit-db/CVE-2026-1234"
                    }
                  ],
                  "severity": "critical",
                  "summary": "PoC released for CVE-2026-1234 (CVSS 9.8): unauthenticated RCE in Palo Alto PAN-OS. Exploitation observed in the wild targeting government networks.",
                  "tags": [
                    "cve",
                    "rce",
                    "palo-alto",
                    "pan-os",
                    "poc",
                    "exploit-in-the-wild"
                  ],
                  "tlp": "WHITE",
                  "ts": "2026-05-27T10:00:00Z",
                  "ttps": [
                    {
                      "id": "T1190",
                      "name": "Exploit Public-Facing Application",
                      "tactic": "Initial Access"
                    },
                    {
                      "id": "T1203",
                      "name": "Exploitation for Client Execution",
                      "tactic": "Execution"
                    }
                  ]
                }
              ],
              "limit": 20,
              "offset": 0,
              "source": "TeleSint",
              "total": 34
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "claim_type": {
                      "description": "report | claim | sale | announcement — e.g. sale for exploit offers",
                      "type": "string"
                    },
                    "kev": {
                      "description": "true = only CVEs in the CISA Known Exploited Vulnerabilities catalog",
                      "type": "string"
                    },
                    "limit": {
                      "description": "Page size, default 20, max 100",
                      "type": "number"
                    },
                    "min_confidence": {
                      "description": "Minimum AI confidence score 0-100",
                      "type": "number"
                    },
                    "offset": {
                      "description": "Pagination offset, default 0",
                      "type": "number"
                    },
                    "q": {
                      "description": "Free-text keyword, e.g. a vendor or product name",
                      "type": "string"
                    },
                    "severity": {
                      "description": "Minimum severity: critical | high | medium | low | info",
                      "type": "string"
                    },
                    "since": {
                      "description": "ISO 8601 timestamp filter, e.g. 2026-05-01T00:00:00Z",
                      "type": "string"
                    },
                    "tag": {
                      "description": "Tag keyword filter, e.g. cve, exploit, poc, patch, zero-day",
                      "type": "string"
                    },
                    "ttp": {
                      "description": "MITRE ATT&CK technique ID prefix, e.g. T1190, T1203",
                      "type": "string"
                    },
                    "type": {
                      "description": "IOC type filter: cve",
                      "type": "string"
                    }
                  },
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-11-04T03:21:06.692Z",
    "quality": {
      "l30DaysTotalCalls": 5,
      "l30DaysUniquePayers": 3,
      "lastCalledAt": "2026-11-04T03:21:06.458Z"
    },
    "resource": "https://telesint-api.onrender.com/vulnerability",
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "CVE and exploitation-in-the-wild signals from Telegram CTI channels. Filters: severity, min_confidence, since, tag(cve|exploit|poc|patch), ttp, type(cve), limit, offset. Returns CVE IDs, affected products, exploit status."
}

What the leaf hashes

{"body":"c7235cb6fde6978b42af411598c0c5e54587ccfae207213a6d86ea9b6f539368","id":3765161,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793996597983740,"prev":3064929,"subject":"x402_bazaar:https://telesint-api.onrender.com/vulnerability","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-11-06 (303443 rows).

1. 0xae584cc7e26dbb52015d47e46111a072fcf1c300362c5028998fedd2055d247f
2. 0x02e5f92f122ebd360aed9536630067b5dc9e3f26a263e42a6318295bcc17ade2
3. 0x49519e26adee4f501a2c9b5004d7473a7a46d2bcc403a4f7edc9447144336e72
4. 0x4f11e3cdec799fe5159fe50a99bba1ab8c40dd30c8965a22a63c42f679921239
5. 0x37081f58df26c6518a93f067ccdcc0ffa5f9d57a0c588f61db20e79d1ffb49bd
6. 0x7fc6b79cfdc2fac12a0a9e5ed4fc733534ecba44332712f9f05adce2b04c092a
7. 0xd48847ea014e09d48e6e07dad1a649baa66b90aeedb6ef59c681891758c2e00f
8. 0xbe30f78df3e085d91692751441183c8493fa00964ebc1abcecb47838f4b6e6c9
9. 0xb56b5873f037ad308d6d0ce1b62274833299cd1aa5f6defaec245fdea9aa54f3
10. 0x10b2a9fbb9dbbb5adee2501b8f1d65a939fa348da724000ea9d29a2de184091b
11. 0x3a09deea51e1678acab15ea601d78ad819007fa00ad993d0045b04b80b46b552
12. 0xdc3228b6e41e560f38519a60873442c46b3bf8cb51333833b72852fa52ed9b54
13. 0x7d0d3aff5cda93ee535a719badb539fe6d893a3c61ecfc842ea162eaa2e80b57
14. 0xa99b1ad6330601889770030d23b9c5dc19a1695efddee19df6debd2cc7c017cf
15. 0xb12c082ef1a62be55def66eb167199a0d5bfcaf36f2f6e389298bc918cf1b0bc
16. 0x4a5b4dca6c638b7872bc6485359586bebc62511ba2776f1ea54dfdaa4d1a511b
17. 0xf19d501fdbc28e10c3244253daf0c37c4752659eae14a7cba585a18c7df9ce0d
18. 0xd422a75f6c3780ed53eca52b50bf40b8f17dc14cffb804142e44fc9f2672029d
19. 0xc0d08d48601d1be90bcfc025e66bcaa0030120d688dd9c919b36c2c4446f4948

Day root

0xb30ccefe7182c6f767e1fcbfb5f64ffd649da831f665f65c5ff39cd40512284f

Chained

0xc383f7ef68d2914082484765aa09e42c12c59a74a096ae64127c562618c506d3

Published

On Arc Testnet, block 71111178: 0xfba13cb7ee4ada7f2fee3702a786a2201596be2ffea37dfc281ab4c8e9942fe1