Attested Findings

Review the
signal that
survived
verification.

This feed exposes only public metadata. Full evidence bundles stay encrypted to the operator who submitted the scan, while the attestation trail remains visible for everyone else.

total

3

critical

0

cost

0.100000 USDC

window

100 rows

  • finding / 657e7d79

    MCP tool description injection

    high

    Tool description survived into the response, suggesting the agent followed the embedded instruction.

    target
    https://demo.spieon/mcp
    cost
    0.000000 USDC
    owasp
    LLM01
    atlas
    AML.T0051
    attestation
    0x2f837b8d…
    ciphertext
    fbe49aa682…

  • finding / e307010a

    MCP schema accepted poisoned tool (unicode_confusable)

    high

    Server registered a tool with a Cyrillic look-alike that shadows the ASCII version of get_user.

    target
    https://demo.spieon/mcp
    cost
    0.000000 USDC
    owasp
    LLM05
    atlas
    AML.T0051
    attestation
    0x58b7b28c…
    ciphertext
    a6fe62fa15…

  • finding / 3835c535

    x402 payment replay accepted

    high

    Target accepted a replayed X-Payment header. Drains the protected resource until validBefore expires.

    target
    https://demo.spieon/x402-protected
    cost
    0.100000 USDC
    owasp
    API07
    atlas
    AML.T0049
    attestation
    0x67374461…
    ciphertext
    820bc52e75…