{"uid":"cap_lbQtBVABjjAO81VOqkUhM","slug":"tokenizen-bug-bounty-intelligence-full-scan-51124ea1","name":"Tokenizen Bug Bounty Intelligence – Full Scan","description":"Bug Bounty Intelligence: AI-generated hypotheses for the Solidity in a public GitHub repo. Not an audit. It reads the files most likely to move funds first, in at most six parts, and the report states how much of the code it read. Usually done within the hour. Check your repo first, for free: GET /api/bug-intel/precheck?repo=owner/name","url":"https://x402.tokenizen.nl/api/bug-intel?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"body":{"type":"object"},"type":{"type":"string","const":"http"},"method":{"enum":["GET","POST"],"type":"string"},"bodyType":{"type":"string"},"queryParams":{"type":"object","properties":{},"additionalProperties":{"type":"string"}}},"additionalProperties":false},"output":{"type":"object","required":["type","example"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"5","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$5/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"5","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"5","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_pWxZ1DfP878GtGsJA_94B","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"5","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Generates AI-powered security hypotheses for Solidity smart contracts in a public GitHub repository, prioritizing fund-moving code, delivered in up to six parts within roughly an hour.","exampleAgentPrompt":"Run a full bug bounty intelligence scan on my public GitHub repo 'myorg/my-defi-protocol' — I want AI-generated security hypotheses with a focus on anything that could move funds, and a report showing how much of the codebase was covered.","exampleUseCases":[{"title":"Pre-launch DeFi protocol security check","prompt":"Before we go live, can you run a bug intel scan on our public GitHub repo 'acme-labs/yield-vault' and give me AI-generated hypotheses about anything that could drain funds or be exploited?"},{"title":"Bug bounty prep for existing contract","prompt":"I'm about to open a bug bounty on 'defiprotocol/lending-core' — can you scan that public GitHub repo for Solidity vulnerabilities, especially anything touching fund transfers, so I know what to expect?"},{"title":"Third-party Solidity code review","prompt":"We're integrating a third-party contract from 'partner-dao/staking-rewards' on GitHub — run a security hypothesis scan on it so we can see potential risks before we deploy anything that touches it."}],"resultDescription":"A multi-part (up to six sections) AI-generated report of security hypotheses for the Solidity files most likely to move funds in the target GitHub repository. The report includes the percentage of the codebase that was read and a prioritized list of potential vulnerability findings. It is not a formal audit but provides actionable intelligence for bug bounty and pre-audit triage.","failureModes":["Repository is private or does not exist — scan cannot access files","Repository contains no Solidity files — no findings generated","Repository is too large — partial coverage with fewer parts","Rate limiting or payment failure — request rejected with 402 status","GitHub API unavailable — crawl step fails, report not generated","Ambiguous or incomplete repo path provided — parsing error"],"whenToPreferThis":"Choose this endpoint when you need fast, cost-effective AI-generated security hypotheses for a public Solidity codebase before a formal audit or bug bounty launch. It is ideal for DeFi teams wanting quick triage of fund-movement risks without waiting for a manual auditor. Prefer the free precheck endpoint (/api/bug-intel/precheck) first to confirm repo compatibility, then use this paid endpoint for the full multi-part report. Not a substitute for a professional audit but excels at surfacing high-priority hypotheses rapidly.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-30T12:31:28.680Z","isFirstParty":false,"canonicalSlug":"tokenizen-bug-bounty-intelligence-full-scan-51124ea1"}