← The evidence ledger
Evidence row 751013
Observed , by sync.x402_bazaar/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://x402.tokenizen.nl/api/vuln-search
- Recorded
- Previous row
- #126951
- Body SHA-256
- 2c79c3c5a9fb5ed17b690ccd2616f5d010c818fb5b263923b88d0b57f0f70a3b
- Leaf
- 0x045068e85bacef225481f0efcd6a9f15c858c54bc3b19476744a93a6c30c1d00
What was observed
{
"endpoints": [
[
"x402",
"https://x402.tokenizen.nl/api/vuln-search"
]
],
"name": "x402.tokenizen.nl/api/vuln-search",
"owner_address": "0x015eb036560216b3051339061ff68a207e0fe88f",
"raw": {
"accepts": [
{
"amount": "5000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxAmountRequired": "5000",
"maxTimeoutSeconds": 300,
"network": "eip155:8453",
"payTo": "0x015Eb036560216B3051339061FF68A207E0fe88f",
"scheme": "exact"
}
],
"description": "tokenizen vulnerability pattern search, 1032 exact-reconciled findings from 10 Sherlock contests",
"extensions": {
"bazaar": {
"info": {
"input": {
"method": "GET",
"queryParams": {
"q": "oracle price manipulation"
},
"type": "http"
},
"output": {
"example": {
"contests": 10,
"note": "acceptance_rate is the historical share of findings of this pattern that were accepted on Sherlock. It is a record of past outcomes, not a prediction for a new submission.",
"platforms": "Sherlock + Code4rena",
"query": "oracle price manipulation",
"results": [
{
"acceptance_rate": 0.5,
"accepted": 55,
"examples_accepted": [
"title of an accepted finding, as returned by the live endpoint"
],
"examples_rejected": [
"title of a rejected finding, as returned by the live endpoint"
],
"pattern": "oracle-manipulation",
"sherlock_rate": 0.53,
"total_findings": 109
}
],
"source": "tokenizen-knowledge-base",
"total_findings": 1032
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"type": "object"
},
"bodyType": {
"type": "string"
},
"method": {
"enum": [
"GET",
"POST"
],
"type": "string"
},
"queryParams": {
"additionalProperties": {
"type": "string"
},
"properties": {},
"type": "object"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type",
"example"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
},
"offer-receipt": {
"info": {
"offers": [
{
"acceptIndex": 0,
"format": "eip712",
"payload": {
"amount": "5000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"network": "eip155:8453",
"payTo": "0x015Eb036560216B3051339061FF68A207E0fe88f",
"resourceUrl": "https://x402.tokenizen.nl/api/vuln-search",
"scheme": "exact",
"validUntil": 1793166025,
"version": 1
},
"signature": "0x8191ff5a2f0f0dad99b467e74648e24b7ae23fdfd52d3900424a0524a7a659d502c5db68f4a67815f0e38cd0fdd60fe0101ec4c43392d02f30f31a1a5434d64b1b"
}
]
}
},
"piprail": {
"client": {
"note": "No proprietary client is required. Any x402 client that implements the exact scheme on eip155:8453 can pay this endpoint."
},
"docs": {
"agents": "https://github.com/holistis/agent-receipt-verify",
"home": "https://tokenizen.nl",
"pay": "https://x402.org"
},
"instruction": "tokenizen x402 payment endpoint. Pay 0.005 USDC on eip155:8453 to 0x015Eb036560216B3051339061FF68A207E0fe88f with an EIP-3009 signature in the PAYMENT-SIGNATURE header. The receipt you get back can be verified independently with npx -y agent-receipt-verify. Docs: https://tokenizen.nl.",
"name": "tokenizen vulnerability pattern search",
"pay": [
{
"amount": "5000",
"amountFormatted": "0.005",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"how": "Sign an EIP-3009 transferWithAuthorization for this amount to payTo and resubmit with the PAYMENT-SIGNATURE header. Any x402 client that speaks the exact scheme works.",
"network": "eip155:8453",
"payTo": "0x015Eb036560216B3051339061FF68A207E0fe88f",
"scheme": "exact",
"symbol": "USDC"
}
],
"protocol": "x402",
"verify": {
"note": "The receipt this endpoint returns can be checked independently, without trusting us.",
"source": "https://github.com/holistis/agent-receipt-verify",
"tool": "npx -y agent-receipt-verify"
},
"version": "2",
"what": "This is an x402 \"402 Payment Required\" endpoint. Pay one of the offered rails to access it."
}
},
"lastUpdated": "2026-10-28T04:45:19.01Z",
"quality": {
"l30DaysTotalCalls": 21,
"l30DaysUniquePayers": 7,
"lastCalledAt": "2026-10-28T04:45:18.568Z"
},
"resource": "https://x402.tokenizen.nl/api/vuln-search",
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "tokenizen vulnerability pattern search, 1032 exact-reconciled findings from 10 Sherlock contests"
}What the leaf hashes
{"body":"2c79c3c5a9fb5ed17b690ccd2616f5d010c818fb5b263923b88d0b57f0f70a3b","id":751013,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793178703112251,"prev":126951,"subject":"x402_bazaar:https://x402.tokenizen.nl/api/vuln-search","subject_kind":"source_record"}Proof
Its day has not closed yet. A day closes ten minutes after midnight UTC; the proof appears here then.