Exploit Sentinel

Evidence, not a label.

Exploit Sentinel returns proofs about smart-contract risk instead of opaque trust scores. It fronts two paid tools over the x402 payment protocol on X Layer (eip155:196), payable per call by an agent or a human:

Tool	What it returns	Price
sell_proof(address, chain)	Fork-simulated honeypot / sellability receipt, buy/sell tax, and an owner-privilege map. Works on any address, including unverified X Layer contracts.	$0.05–0.10
deep_audit(address)	Verified-source findings (severity + quoted source line), upgrade paths, and a verdict. Unverified addresses return an honestly-labeled behavioral partial — never a fabricated source read.	$1
quick_flags	Free triage tier.	Free

The differentiator is the receipt: sell_proof proves sellability by actually simulating a buy-and-sell against a mainnet fork, and deep_audit cites the exact source line behind every finding.

Stack

• Runtime: Bun + TypeScript
• HTTP: Express 5
• Payments: @okxweb3/x402-express / -core / -evm (X Layer, eip155:196)
• Audit engine: Foundry (anvil fork simulation) + Slither

Layout

src/            TypeScript x402 server (payment surface + tools)
contracts/      Foundry project — fork-sim harness for sell_proof

Getting started

bun install                 # install JS deps
bun run dev                 # start the server (hot reload) on :3000
curl localhost:3000/health  # -> {"ok":true}

Contracts:

cd contracts
forge build                 # compile
forge test                  # run the harness

Configuration

Payment settlement requires OKX Dev Portal credentials. Create a .env (gitignored) with the following before enabling the payment middleware:

PORT=3000
OKX_API_KEY=          # OKX Dev Portal
OKX_API_SECRET=
OKX_API_PASSPHRASE=
X402_PAY_TO=          # your Agentic Wallet (receives settled payments)
X402_NETWORK=eip155:196   # X Layer only (chain 196 / 0xc4, gas token OKB)

The server boots and serves /health without credentials; the paid routes stay behind the payment seam until credentials are provided.

Status

Early scaffold. The payment middleware is stubbed behind a clearly-marked seam in src/server.ts and is wired only once credentials are available.