← Market

Vuln · Lockfile

POST the exact package-lock.json bytes. Amount is 50000 atomic USDC on Base only. The EIP-3009 nonce is lockfileBindingNonce over those bytes, this origin, POST, /api/vuln/lockfile, payTo, asset, value, validAfter, validBefore, and snapshotId. Signing instructions: https://horizonpulse.dev/lockfile-signing. A client-chosen random nonce is rejected.

POST https://horizonpulse.dev/api/vuln/lockfile

0.05 USDC on Base · payTo 0x5b32c973596078a967562ca652761404f19be0e9

Status: unverified (probe-pending)

Settlement: direct to the seller's payTo — 0% HIVE402 take

Payment routes