security · Listed · Base · Found · 60 endpoints · Gateway-eligible
vape-x402
VAPE
Submission-ready bug-bounty PoC: real recon + Slither/Halmos/Mythril/Aderyn (when available) + a frontier-LLM source review, for a Base/EVM contract address or
Indexed from this operator's public /.well-known/x402.json. Found is not operator-owned and is not attested. Claim or opt out.
Agent Read · Cleared Index
ROUTE
Route when you need security at published x402 prices.
confidence
78%
source
signal
Index before you pay. Same payload for agents:
GET /api/cleared/agent-read?slug=cat-vape-x402-vapex402-workers-dev
When to call
- Need security via x402 and want Cleared-indexed payTo with a live scorecard.
- Budget between $0.01 and $1.00 per call on published endpoints.
- Submission-ready bug-bounty PoC: real recon + Slither/Halmos/Mythril/Aderyn (when available) + a frontier-LLM source review, for a Base/EVM contract address or
Risks
- Found — not operator-owned; claim status unknown.
- No Cleared settlement receipt on file yet.
- No Gateway traffic yet — market share unproven.
Price posture
Published 60 endpoints from $0.01 to $1.00.
Category · Gateway
security · no Gateway routes yet — early / unproven on Cleared market share.
Endpoint hints
GET /scan/exploit_checkGET /scan/exploit_check at $0.01.
GET /scan/token_safety_checkGET /scan/token_safety_check at $0.02.
GET /scan/liquidity_checkGET /scan/liquidity_check at $0.02.
GET /scan/rug_pull_alertGET /scan/rug_pull_alert at $0.03.
GET /scan/market_intelGET /scan/market_intel at $0.07.
GET /scan/dossier_checkGET /scan/dossier_check at $0.10.
GET /scan/bounty_deep_diveGET /scan/bounty_deep_dive at $1.00.
GET /scan/deep_contract_auditGET /scan/deep_contract_audit at $1.00.
Evidence (Cleared)
- → Intake verified · Gateway-eligible
- → Trust 70/100 · pass · tier listed
- → Protocol x402 · Base
- → Manifest reachable · schema valid
- → Found listing — indexed from public x402.json, not operator-attested.
Endpoints
VAPE exploit_check — Contract verification + proxy-swap surface check. Real on-chain/market data, no simulation.
$0.01GET https://vape-x402.vapex402.workers.dev/scan/exploit_checkVAPE token_safety_check — Full token safety + liquidity scan with a weighted 0-100 risk score. Real on-chain/market data, no simulation.
$0.02GET https://vape-x402.vapex402.workers.dev/scan/token_safety_checkVAPE liquidity_check — Liquidity depth + top pair DEX for a Base token. Real on-chain/market data, no simulation.
$0.02GET https://vape-x402.vapex402.workers.dev/scan/liquidity_checkVAPE rug_pull_alert — Owner-power / rug-risk flags (mint, blacklist, pausable transfers, LP concentration). Real on-chain/market data, no simulation.
$0.03GET https://vape-x402.vapex402.workers.dev/scan/rug_pull_alertVAPE market_intel — Base TVL with 24h/7d change, per-protocol share/category breakdown, concentration risk, 24h DEX volume, top gainers/losers, ETH/BTC prices, Fear & Greed index, global market cap, and a real-data narrative summary. Takes no input -- always a whole-of-Base snapshot, not a per-token lookup. Real on-chain/market data, no simulation.
$0.07GET https://vape-x402.vapex402.workers.dev/scan/market_intelVAPE dossier_check — VAPE's deepest instant verdict: weighted 0-100 risk score, meme-factory-template detection, recent-hack correlation, public web-reputation search, a live check of the project's declared socials, and a frontier-LLM quick read of the verified source. Real on-chain/market data, no simulation.
$0.10GET https://vape-x402.vapex402.workers.dev/scan/dossier_checkVAPE bounty_deep_dive — Submission-ready PoC and full technical detail: real recon + Slither + frontier-model line-by-line source review, delivered as a real committed report — VAPE's deepest automated pass. Supply a contract address, or a GitHub owner/repo to have VAPE audit a specific bounty program directly.
$1.00GET https://vape-x402.vapex402.workers.dev/scan/bounty_deep_diveVAPE deep_contract_audit — slither+aderyn+mythril severity-rated audit + 0-100 score for a Base/EVM contract address — the same real-tool pipeline as bounty_deep_dive, address-only.
$1.00GET https://vape-x402.vapex402.workers.dev/scan/deep_contract_auditVAPE tx_decode — Plain-language transaction decode + risk flags for any Base/EVM tx hash — real on-chain tx/receipt/logs plus method/event-signature lookup, no simulation.
$0.05GET https://vape-x402.vapex402.workers.dev/scan/tx_decodeVAPE community_intel_broadcast — VAPE's latest 6-hourly consolidated security + market intel broadcast — real committed output from agents/broadcast.py, not generated per-request.
$0.10GET https://vape-x402.vapex402.workers.dev/scan/community_intel_broadcastVAPE bulk_safety_bundle — token_safety_check batched over 5-25 tokens in one job, flat-priced.
$0.50GET https://vape-x402.vapex402.workers.dev/scan/bulk_safety_bundleVAPE website_review — Phishing/scam-page red-flag read of a website: fake contract addresses, wallet-drainer patterns, brand mismatch, copy-paste scam-site boilerplate — real scrape + frontier-LLM read, not a smart-contract audit (see bounty_deep_dive for that).
$0.15GET https://vape-x402.vapex402.workers.dev/scan/website_reviewVAPE web_research — General web research: search + scrape a handful of real results, tag on-chain addresses/tx hashes/CVEs/$TICKERs, and return a dense, agent-consumable summary grounded only in what was actually found. Built for AI-agent callers (structured JSON, no marketing prose) as much as human ones.
$0.01GET https://vape-x402.vapex402.workers.dev/scan/web_researchVAPE token_intel — A full independent read on one token: current price + a 0-1 confidence score, first-ever-recorded price (an oracle-derived age signal harder to spoof than a DEX pair timestamp), the token's real logo, and — when a protocol slug is given — fees/revenue, the next unlock event, and treasury own-token share.
$0.01GET https://vape-x402.vapex402.workers.dev/data/token_intelVAPE token_chart — Daily price series for a token (default 30d), plus the token's real logo — feeds sparklines and a rule-based volatility read.
$0.01GET https://vape-x402.vapex402.workers.dev/data/token_chartVAPE protocol — Full protocol record: per-chain TVL, category, audits, the official logo, Twitter, and description — the 'who is this protocol' snapshot.
$0.01GET https://vape-x402.vapex402.workers.dev/data/protocolVAPE protocol_fees — A protocol's real earned fees + revenue (24h/7d/30d/1y/all-time) with its logo — 'does this actually make money, or is it just parked TVL?', a legitimacy signal raw TVL misses.
$0.01GET https://vape-x402.vapex402.workers.dev/data/protocol_feesVAPE unlocks — Token unlock / emission schedule for a protocol — surfaces the next upcoming unlock event (a concrete dump-risk an investigator must flag) and how many days out it is.
$0.01GET https://vape-x402.vapex402.workers.dev/data/unlocksVAPE treasury — A protocol's on-chain treasury composition — total USD, own-token USD, and the own-token share (a treasury that's ~all its own token is a fragility signal).
$0.01GET https://vape-x402.vapex402.workers.dev/data/treasuryVAPE chain_protocols — Top protocols on a chain by TVL (default Base), each with its real logo, category, and 24h/7d change — the chain-ecosystem view.
$0.01GET https://vape-x402.vapex402.workers.dev/data/chain_protocolsVAPE chain_overview — A chain's headline TVL and its rank among all tracked chains (default Base).
$0.01GET https://vape-x402.vapex402.workers.dev/data/chain_overviewVAPE chain_fees — Fee-earning protocols on a chain, ranked, each with its logo (default Base) — the chain's real economic activity, not just parked capital.
$0.01GET https://vape-x402.vapex402.workers.dev/data/chain_feesVAPE dex_volumes — DEX trading volume on a chain by venue, each with its logo (default Base) — real trading activity across the chain's exchanges.
$0.01GET https://vape-x402.vapex402.workers.dev/data/dex_volumesVAPE yields — Yield pools filtered by chain/project/symbol, ranked by TVL, with apy/apyBase/ilRisk/exposure — enough to tell a real yield venue from a trap (huge APY + tiny TVL = red flag).
$0.01GET https://vape-x402.vapex402.workers.dev/data/yieldsVAPE stablecoins — Stablecoins by circulating supply with live peg price and a computed depeg amount — a de-pegging stablecoin is a live systemic threat signal.
$0.01GET https://vape-x402.vapex402.workers.dev/data/stablecoinsVAPE bridges — Tracked bridges ranked by recent daily volume — bridge exploits are a top attack class, and this is the capital-flow data that category needs a source for.
$0.01GET https://vape-x402.vapex402.workers.dev/data/bridgesVAPE wallet_pnl_deepdive — A real wallet holdings + P&L estimate: current token balances with USD values, and an unrealized-P&L estimate per holding (current value vs. price at first incoming transfer) — an approximation, not full trade-by-trade accounting. Base mainnet only.
$0.25GET https://vape-x402.vapex402.workers.dev/data/wallet_pnl_deepdiveChecks
reachable
valid
2026-10-09T08:15:51.564Z
No settlement evidence found in chain signals.
Gateway routing
Score ≥70/100 — Cleared attestation pass. Route via Gateway before pay.
Claim this listing to upgrade to Cleared attestation.
Claim listing