SparkAudit — smart-contract security audit (x402)
Autonomous smart-contract security audit on an NVIDIA DGX Spark. POST {source|address, language}; returns severity-ranked findings (reentrancy, access-control, unchecked-call, tx.origin, weak-rng) with exploit + patch. Standard x402 on Base, gas sponsored by PayAI — auto-payable by buyer-agents.
Start with a quote-only recipe. Payment signing stays in your project.
const response = await fetch("https://yearly-taxi-proprietary-donations.trycloudflare.com/x402/audit", {
method: "POST",
headers: { "content-type": "application/json" },
body: JSON.stringify({
"replace": "with provider-approved input"
}),
});
console.log(response.status);
console.log(Object.fromEntries(response.headers));
console.log((await response.text()).slice(0, 1000));
// A valid 402 is a quote, not a completed paid call.Review the provider input schema before running this non-read-only method. No payment code is included.
- Exact route checked
not safely testable · potentially-mutating-method:POST
- Origin unavailable
UNSAFE_URL_ENOTFOUND: https://yearly-taxi-proprietary-donations.trycloudflare.com/
- Observed in 402-index
Discovered through self-registered.
- Registry record checked
Registry health: down.
EVIDENCE
Each record has an exact-route quote outcome. Unresolved templates and potentially mutating methods are labeled instead of being invoked without provider-specific test input. A quote is still separate from a settled paid call.