Evidence row 71139

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://apkcube.com/api/v1/apps/:packageName/security"
    ]
  ],
  "name": "APKCube APK Security Scan",
  "owner_address": "0xaf4ed8d6d780d15e0937e7fbe65627ed451e9c09",
  "raw": {
    "accepts": [
      {
        "amount": "50000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:8453",
        "payTo": "0xaf4ed8d6d780d15e0937e7fbe65627ed451e9c09",
        "scheme": "exact"
      },
      {
        "amount": "50000",
        "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
        "extra": {
          "feePayer": "GVJJ7rdGiXr5xaYbRwRbjfaJL7fmwRygFi1H6aGqDveb"
        },
        "maxTimeoutSeconds": 300,
        "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
        "payTo": "GXEo7ndykiNcvZPzBJqA6rugdkhKXGrKbpx1te6z4Apj",
        "scheme": "exact"
      }
    ],
    "description": "Security scan of an Android APK build: SHA-256 checksum, VirusTotal malware verdict, signing certificates and permissions, plus findings such as a debuggable build, cleartext traffic, unguarded exported components, a packer, or a version that disagrees with the listing. APK malware and integrity check by package name. Keyless pay-per-call in USDC on Base or Solana: no account or API key.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "pathParams": {
              "packageName": "com.whatsapp"
            },
            "queryParams": {},
            "type": "http"
          },
          "output": {
            "example": {
              "apkId": "string",
              "findings": [
                {
                  "detail": "string",
                  "id": "string",
                  "severity": "warning",
                  "title": "string"
                }
              ],
              "manifest": {},
              "md5": "string",
              "natives": {},
              "packageName": "com.whatsapp",
              "pairip": false,
              "permissionSummary": "string",
              "permissions": [
                {
                  "category": "string",
                  "description": "string",
                  "label": "string",
                  "name": "string",
                  "sensitive": false,
                  "standard": false
                }
              ],
              "scanned": false,
              "scannedAt": "string",
              "sha1": "string",
              "sha256": "b8e3f8c7d0a5e2f1c4b9a6d3e0f7c2b5a8d1e4f7c0b3a6d9e2f5c8b1a4d7e0f3",
              "signature": {
                "blocked": false,
                "certs": [
                  {}
                ],
                "knownSignatures": 0,
                "match": "string",
                "scheme": "string",
                "status": "string"
              },
              "verdict": "verified",
              "versionCode": 242205,
              "versionName": "2.24.2.5",
              "virusTotal": {
                "flagged": 0,
                "flaggedBy": [
                  {}
                ],
                "meta": {},
                "vendors": 0
              }
            },
            "type": "json"
          }
        },
        "routeTemplate": "/api/v1/apps/:packageName/security",
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "pathParams": {
                  "properties": {
                    "packageName": {
                      "description": "Android package id, e.g. com.whatsapp.",
                      "type": "string"
                    }
                  },
                  "required": [
                    "packageName"
                  ],
                  "type": "object"
                },
                "queryParams": {
                  "properties": {
                    "apkId": {
                      "description": "A specific build from /apps/{packageName}/versions. Omit for the newest.",
                      "type": "string"
                    }
                  },
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-10-24T09:30:31.405Z",
    "quality": {
      "l30DaysTotalCalls": 1,
      "l30DaysUniquePayers": 1,
      "lastCalledAt": "2026-10-24T09:30:31.256Z"
    },
    "resource": "https://apkcube.com/api/v1/apps/:packageName/security",
    "serviceName": "APKCube APK Security Scan",
    "tags": [
      "apk-security",
      "malware-scan",
      "virustotal",
      "android",
      "app-integrity"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Security scan of an Android APK build: SHA-256 checksum, VirusTotal malware verdict, signing certificates and permissions, plus findings such as a debuggable build, cleartext traffic, unguarded exported components, a packer, or a version that disagrees with the listing. APK malware and integrity check by package name. Keyless pay-per-call in USDC on Base or Solana: no account or API key."
}

What the leaf hashes

{"body":"253e2658f6b5f71c91cb7cf2ee860a3a36d9464b60f45164d52feba3fc010179","id":71139,"kind":"listing","method":"baseline/1","observed_us":1793025481674784,"prev":null,"subject":"x402_bazaar:https://apkcube.com/api/v1/apps/:packageName/security","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0x2f7e62b916331a00148e500755898c1d95048c76fc6c3981e7fd644c77b7a5bb
2. 0x0273fe6da6d8dfc33755b2ec6c4b509664ade50d0f7d5e4993004473c6028681
3. 0x9f5fc3a487534a49d1f9b69859a026414412752a9d847b02c8ddc9f08604feca
4. 0x2d9c22ff80507e4b49732e21a45251510d104dc38803e6c7b4a36d0a20720590
5. 0xf515df11ceef73c74f62d509839bf9252d00db15b01b1a46fdb63beb55336442
6. 0xb14d2e8408522389e0881d5916aa6bae1be098150835acbba70295706f605724
7. 0x663528893a54dd48a6f257c97dd3dfd44349b799e188afee2070a0bbd85c0698
8. 0xa2d90fdcd4945c462c695f5495a606801136a764e4924dbec0f781517c235d0f
9. 0x28fe84d48388aa28bbb266d381351b0d2015f3324985772e33db3437cbfe2538
10. 0xf42f089dedbd45e76862cb2709d50c500d0639d2321faba4b299fcd2729662df
11. 0x5706295a72541360bda32c42f2b8bcd1e27be58a3989ae29fd4aeb7edddae0ae
12. 0x12cda00da304cf48d9b3c1874c07a6f0a2e143ba0d25e359b8fd805abb057b32
13. 0x36a44931b230976c04691d90bf3a25ed4111d74c78b672850d8025a911ca88dd
14. 0x683955a5b2250ad50568d022a6580d8739b6aff1356779d72a773b088e7c289c
15. 0x610738e0c43687aded83c613c73de8b5226c73c375858a167436461c522ea213
16. 0x06d71bfa7d8b41d62c8836efc2c601e1cc3772d9453596b2ae4950887f3310ca
17. 0x8c756542e482157df0c36464d75c937b845e4423dbbcfad08f0cf8d5a16b9a13
18. 0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d
19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae