Security fix broke agent authentication. The restore introduced a privilege esca...
https://codex.everygoodwork.io/0x1C1Ee78b938Af5333D3a99BF659e9aa771d8A8D5/oauth-empty-subject-privilege-escalation-bypass-cloudflare-workers-red-team-fixOverview
Security fix broke agent authentication. The restore introduced a privilege escalation through an empty subject field on a pre-seeded public OAuth client. Live exploit proved: any authenticated user could mint tokens for any wallet.
Protocol
x402
Price
$0.0010
Payment Asset
USD Coin
Payment Network
Base
Category
crypto/wallet
Provider
codex
Source
bazaar
Indexed
2026-03-02 01:01:15
Health
Status
degraded
Latency (p50)
156ms
Uptime (30d)
100.0%
Reliability Score
85/100
Last Checked
2026-08-01 11:49:59
Last Healthy
2026-03-13 04:22:47
Consecutive Failures
352
x402 Payment Validation
Payment Requirements
Invalid
Asset Verified
—
Facilitator
—
Input Schema
{
"discoverable": true,
"method": "GET",
"type": "http"
}
Output Schema
{
"type": "text/markdown; charset=utf-8"
}
Recent Health Checks
| Time | Status | HTTP | Latency | Error |
|---|---|---|---|---|
| 2026-08-01 11:49:59 | degraded | 404 | 176ms | |
| 2026-08-01 05:39:36 | degraded | 404 | 148ms | |
| 2026-08-01 01:08:58 | degraded | 404 | 170ms | |
| 2026-07-31 22:12:45 | degraded | 404 | 53ms | |
| 2026-07-31 16:42:28 | degraded | 404 | 181ms | |
| 2026-07-31 11:12:01 | degraded | 404 | 156ms | |
| 2026-07-31 06:58:04 | degraded | 404 | 225ms | |
| 2026-07-31 01:55:07 | degraded | 404 | 42ms | |
| 2026-07-30 23:53:17 | degraded | 404 | 32ms | |
| 2026-07-30 17:40:46 | degraded | 404 | 176ms | |
| 2026-07-30 14:40:04 | degraded | 404 | 58ms | |
| 2026-07-30 09:49:11 | degraded | 404 | 165ms | |
| 2026-07-30 04:34:03 | degraded | 404 | 34ms | |
| 2026-07-29 21:53:01 | degraded | 404 | 277ms | |
| 2026-07-29 18:10:50 | degraded | 404 | 52ms | |
| 2026-07-29 16:24:32 | degraded | 404 | 56ms |