addrbookFor publishers
← The evidence ledger

Evidence row 457374

Observed , by sync.x402_bazaar/1.

Kind
listing
About
source_record x402_bazaar:https://apexfaucet.xyz/api/x402/arc-hook-risk
Recorded
Previous row
None: the first of its kind about this subject
Body SHA-256
d48daa2fea40086156e350aad1dbdb3c31de6786fab77cb020027a4c0a525c7b
Leaf
0x77b8741ac97d201eadb55f8f03e129dd83ece9941a7df8dd3ce1cfd8a4a2f670

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://apexfaucet.xyz/api/x402/arc-hook-risk"
    ]
  ],
  "name": "Arc Uniswap v4 hook risk",
  "owner_address": "0xd334ab5151c624cada654854e2879903dc4217ed",
  "raw": {
    "accepts": [
      {
        "amount": "3000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "credentialTypes": [
            "authorization"
          ],
          "name": "USD Coin",
          "note": "Sign an EIP-3009 transferWithAuthorization to payTo and send it base64 in PAYMENT-SIGNATURE - we settle it and you pay no gas. Or pay and replay the hash in X-PAYMENT-BASE.",
          "replayHeader": "X-PAYMENT-BASE",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:8453",
        "payTo": "0xd334ab5151c624cada654854e2879903dc4217ed",
        "scheme": "exact"
      },
      {
        "amount": "3000",
        "asset": "0x3600000000000000000000000000000000000000",
        "extra": {
          "credentialTypes": [
            "authorization"
          ],
          "name": "USDC",
          "note": "Sign an EIP-3009 transferWithAuthorization to payTo and send it base64 in PAYMENT-SIGNATURE - we settle it and you pay no gas. Or, since USDC is also the native gas token on Arc, send a plain value transfer to payTo and replay the hash in X-PAYMENT-ARC. Finality is instant on inclusion.",
          "replayHeader": "X-PAYMENT-ARC",
          "rpc": "https://rpc.mainnet.arc.io",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:5042",
        "payTo": "0xd334ab5151c624cada654854e2879903dc4217ed",
        "scheme": "exact"
      },
      {
        "amount": "3000",
        "asset": "0x3600000000000000000000000000000000000000",
        "extra": {
          "name": "GatewayWalletBatched",
          "note": "Circle Gateway nanopayment: pay from your Gateway balance with a gas-free signature (validBefore at least 7 days out). Settled by Circle in batches.",
          "verifyingContract": "0x77777777dcc4d5a8b6e418fd04d8997ef11000ee",
          "version": "1"
        },
        "maxTimeoutSeconds": 604900,
        "network": "eip155:5042",
        "payTo": "0xd334ab5151c624cada654854e2879903dc4217ed",
        "scheme": "exact"
      },
      {
        "amount": "3000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "GatewayWalletBatched",
          "note": "Circle Gateway nanopayment: pay from your Gateway balance with a gas-free signature (validBefore at least 7 days out). Settled by Circle in batches.",
          "verifyingContract": "0x77777777dcc4d5a8b6e418fd04d8997ef11000ee",
          "version": "1"
        },
        "maxTimeoutSeconds": 604900,
        "network": "eip155:8453",
        "payTo": "0xd334ab5151c624cada654854e2879903dc4217ed",
        "scheme": "exact"
      },
      {
        "amount": "3000",
        "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
        "extra": {
          "feePayer": "D93NE2kMj88BPsHfdZZ4A1HX2CGo14Y18Bdb3J4qtD5c"
        },
        "maxTimeoutSeconds": 300,
        "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
        "payTo": "HYiepS7mNCVVKoaDmZLQ6rNtMWHTQqKheM1NLGn1x8kJ",
        "scheme": "exact"
      },
      {
        "amount": "10000000000000000",
        "asset": "0x8d0D000Ee44948FC98c9B98A4FA4921476f08B0d",
        "extra": {
          "credentialTypes": [
            "authorization"
          ],
          "decimals": 18,
          "minUsd": 0.01,
          "name": "World Liberty Financial USD",
          "note": "BNB Smart Chain: sign an EIP-3009 transferWithAuthorization in USD1 (18 decimals, EIP-712 name \"World Liberty Financial USD\", version \"1\") to payTo and send it base64 in PAYMENT-SIGNATURE; we settle it and pay the gas. Minimum $0.01 on BNB.",
          "symbol": "USD1",
          "version": "1"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:56",
        "payTo": "0xd334AB5151C624cAdA654854E2879903Dc4217eD",
        "scheme": "exact"
      },
      {
        "amount": "10000000000000000",
        "asset": "0xcE24439F2D9C6a2289F741120FE202248B666666",
        "extra": {
          "credentialTypes": [
            "authorization"
          ],
          "decimals": 18,
          "minUsd": 0.01,
          "name": "United Stables",
          "note": "BNB Smart Chain: sign an EIP-3009 transferWithAuthorization in U (18 decimals, EIP-712 name \"United Stables\", version \"1\") to payTo and send it base64 in PAYMENT-SIGNATURE; we settle it and pay the gas. Minimum $0.01 on BNB.",
          "symbol": "U",
          "version": "1"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:56",
        "payTo": "0xd334AB5151C624cAdA654854E2879903Dc4217eD",
        "scheme": "exact"
      }
    ],
    "description": "Arc pre-trade risk in microseconds, no chain call: pass ?hook=0x… and get the verdict read straight out of the Uniswap v4 permission bits encoded in the hook address. It tells you what the hook is ALLOWED to do (run on every swap, rewrite the amounts, touch liquidity), not what it does: permission is not behaviour. No trap rate is quoted - the 83.7% we used to state came from a pre-buy sell quote and was withdrawn on 2026-09-22 after a real round trip sold 10 of 10 pools with that signature.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "discoverable": true,
            "method": "GET",
            "queryParams": {
              "hook": "0xB780642659b782b672f20516fC267d5069252044"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "data": {
                "historicalTrapRate": null,
                "hook": "0xb780642659b782b672f20516fc267d5069252044",
                "method": "Uniswap v4 permission bits read from the hook address. No base rate is given: the 2026-09-17 rates were measured with a …",
                "note": "Instant (no chain call). For a definitive answer on one pool use the exit check, which actually attempts the round trip.",
                "ok": true,
                "permissionBits": "10000001000100",
                "permissions": [
                  "beforeInitialize",
                  "afterSwap"
                ],
                "verdict": "can rewrite swaps",
                "why": "This hook runs on every swap AND may rewrite the amounts, which is the machinery that can block or tax a sell. Permissio…"
              },
              "ok": true,
              "paid": 0.003
            },
            "schema": {
              "properties": {
                "data": {
                  "type": "object"
                },
                "ok": {
                  "type": "boolean"
                },
                "paid": {
                  "type": "number"
                }
              },
              "type": "object"
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "hook": {
                      "description": "The 0x hook address from a Uniswap v4 pool key.",
                      "pattern": "^0x[0-9a-fA-F]{40}$",
                      "type": "string"
                    }
                  },
                  "required": [
                    "hook"
                  ],
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method",
                "queryParams"
              ],
              "type": "object"
            },
            "output": {
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1791909159/bazaar-icons/f4adc3a60c4cd07b.png",
    "lastUpdated": "2026-10-27T09:07:22.475Z",
    "quality": {
      "lastCalledAt": "2026-10-27T09:07:22.475Z"
    },
    "resource": "https://apexfaucet.xyz/api/x402/arc-hook-risk",
    "serviceName": "Arc Uniswap v4 hook risk",
    "tags": [
      "uniswap v4",
      "hooks",
      "arc",
      "token safety",
      "honeypot"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Arc pre-trade risk in microseconds, no chain call: pass ?hook=0x… and get the verdict read straight out of the Uniswap v4 permission bits encoded in the hook address. It tells you what the hook is ALLOWED to do (run on every swap, rewrite the amounts, touch liquidity), not what it does: permission is not behaviour. No trap rate is quoted - the 83.7% we used to state came from a pre-buy sell quote and was withdrawn on 2026-09-22 after a real round trip sold 10 of 10 pools with that signature."
}

What the leaf hashes

{"body":"d48daa2fea40086156e350aad1dbdb3c31de6786fab77cb020027a4c0a525c7b","id":457374,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793100973710310,"prev":null,"subject":"x402_bazaar:https://apexfaucet.xyz/api/x402/arc-hook-risk","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (273461 rows).

  1. 0x77b86fddf1bb6ee2e37fe76cecd2e27876f236438972534ebfb06e8bd59dcc6a
  2. 0xd88e924150e3592d40d611129fbbaaa187283885353c33ca9eddd0daa911d56e
  3. 0xe0e2abcec414b0e09cfb8acca7802578b63ef7beb334013ee93a3c6709d4f5e3
  4. 0x7341c9e3557f32b906c83dfa7a068011a9c99ec75af1f3b9a17aaafca7cb79e9
  5. 0x143f9256f2d3b210e52c7b5935c0af36c8fa752987eb6de952b01160994a8792
  6. 0xccf76c718ba8c054657ab02d151ab19e37730b8fd083db155b408f389866930c
  7. 0x9c8501943cc91babe366fe2b54808970af27a109305d272f5068bc05170529f7
  8. 0xceebe9073adf9f2890f42ab7b08d84751f9304f361a63cd865ebe56ff47b06fa
  9. 0xd5913625e97b662dd4236a406dd2ad2e3fc25035d0fb612f0128118fa7279a62
  10. 0xdca7be968b847f07be720f9ef981d9dd268c59dc5459d336797e4bf9be51192c
  11. 0x5c178a60ac8a8b1697e714e16bb750246722a6136f279e1719bdab90c149fd7b
  12. 0x30b0c1fa0ae50435d58b5b7f993dde40a8bcc3f5956d7e3d31946f1a957684b4
  13. 0x8f2d125f5fe55a24b5da16577766eeaa13f24a272bb4c1c016f423ae917da681
  14. 0x9848c068b1371232529d2b5738fdc45b854c57da041b69ea7c9e112b14e2d9d1
  15. 0x275720ecabb68df33eee92ae4fd70572a8d952d6c61c061c2869cfc3217aa5c5
  16. 0x23cf9bb4337ee8be7fcae368fd69d24c62c11fb45882127b4cd919bb96a19996
  17. 0x0e01aa9525097570a6edaf32bfc959de57bf5c24317cf10c0716affea85ca60d
  18. 0xa20d48798a34aba12eb9c7297722982d910f06c148f5e27ac59307422964a585
  19. 0x9fc354c0ea3efc3f1b6548bb77ea902a50f2c9647647ea61592efce2bd795699
Day root
0xdd77e5e99da32c3f154180d63e3c3e6fe11e896a2c6896412ef6b5c4bcf7e795
Chained
0x23bb4dfd09f55c15ac3962f53578e02c6114d5bfd9bb451cf8794fb6e2817ef4
Published
On Arc Testnet, block 69414147: 0xb2ebd83aafeb765a0ce66e76aefb133ed06606c98038fd56191e2bcd1dcb77b4

How to check it · This row as JSON