passlisted in Coinbase#2 by calls of 3 on this host
0.005 USDC
per call, as the listing declares it on eip155:
- Validation state
- pass
- Uptime, 7 / 30 / 90 days
- 100% / 100% / 100%
- Calls, trailing 30 days
- 1
- Unique payers, trailing 30 days
- 1
- Last called
- 2026-08-19 08:39 UTC
- First observed by TOLLderived
- 2026-09-10
- Pricederived
- 0.005 USDC
- Networks
- 1
How big is this endpoint among the ones like it?
No trace is drawn of this endpoint’s own volume. Its counters have changed 1 time across 29 observations, and 3 changes are the fewest this site will draw a trace through, because two points and a guess are not a series. Every observation is in the JSON.
wazir-x402.duckdns.org serves vuln search, a GET endpoint that TOLL places in search, listed in the Coinbase registry.
A call to vuln search costs 0.005 USDC on Base, as declared.
The listing describes the request as the query parameter q.
vuln search returns json; the example shows note, query, source, results, contests, platforms and 1 other.
vuln search answered the sweep of 2026-09-15 with a valid 402, as at every sweep since 2026-09-11.
vuln search is one of 3 listed endpoints on wazir-x402.duckdns.org, tied 2nd by calls with 1 other among them.
vuln search takes 10% of the calls counted across wazir-x402.duckdns.org.
In the trailing 30 days: one call, one payer.
vuln search was last called 28 days before the snapshot.
Closest in price to vuln search within search: amazon search at glim.sh and search at twitter.use.x402atlas.com.
Among comparable prices in search, vuln search sits above 27% of them.
Its payee wallet receives for this endpoint alone.
The price of vuln search is declared by 127 other listings in search too.
the payment options, as of 2026-09-15 21:20 UTC · method · pinnable
| registry | network | asset | amount | scheme | pay to |
|---|---|---|---|---|---|
| Coinbase | eip155: | USDC | 0.005 USDC | exact | 0xdffcC7…6A3A5A |
the checks, as of 2026-09-15 07:04 UTC · method · pinnableendpoint answered HTTP 402
No named check failed.
Every sweep that observed this endpoint, newest first.
| observed, UTC | state | failed checks | sweep |
|---|---|---|---|
| 2026-09-15 07:04 UTC | pass | 0 | daily-2026-09-15 |
| 2026-09-14 06:30 UTC | pass | 0 | daily-2026-09-14 |
| 2026-09-13 06:20 UTC | pass | 0 | daily-2026-09-13 |
| 2026-09-12 10:29 UTC | pass | 0 | daily-2026-09-12 |
| 2026-09-11 14:49 UTC | pass | 0 | daily-2026-09-11 |
Presence in a registry, not liveness of the service (method). Newest first.
- listed in Coinbase
From the registry record, not validated by TOLL.the declared schema, as of 2026-08-19 08:39 UTC · method · live
The input and output block
{
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"q": "oracle price manipulation"
}
},
"output": {
"type": "json",
"example": {
"note": "acceptance_rate = historische payout-kans op Sherlock",
"query": "oracle price manipulation",
"source": "3ilm-knowledge-base",
"results": [
{
"pattern": "oracle-manipulation",
"accepted": 55,
"sherlock_rate": 0.53,
"total_findings": 109,
"acceptance_rate": 0.5,
"examples_accepted": [
"<titel van een geaccepteerde finding>"
],
"examples_rejected": [
"<titel van een afgewezen finding>"
]
}
],
"contests": 10,
"platforms": "Sherlock + Code4rena",
"total_findings": 1032
}
}
}Cite this page
The pinned URL below renders this page from the snapshot of 2026-09-15 21:20 UTC and does not change; the live page does, every six hours. Data reuse is under CC BY 4.0 (terms).
Plain text
TOLL, "vuln search on wazir-x402.duckdns.org", snapshot of 2026-09-15 21:20 UTC. https://tollindex.com/e/wazir-x402-duckdns-org-api-vuln-search-f79881/at/2026-09-15T21-20Z. Accessed [access date].
BibTeX
@misc{toll-e-wazir-x402-duckdns-org-api-vuln-search-f79881-2026-09-15T21-20Z,
author = {TOLL},
title = {vuln search on wazir-x402.duckdns.org},
howpublished = {\url{https://tollindex.com/e/wazir-x402-duckdns-org-api-vuln-search-f79881/at/2026-09-15T21-20Z}},
year = {2026},
month = {9},
note = {Pinned view of the snapshot of 2026-09-15 21:20 UTC. Accessed [access date].}
}None yet. Anything submitted through the form below is published here with its outcome.