# Agent Souk DeFi Post-Mortem Attack Chain Analyzer

> Agent Souk DeFi Post-Mortem Attack Chain Analyzer is a paid API for AI agents from api.agentsouk.dev, paid per call via x402, $0.03/call, status unknown (last checked 2026-10-11).

Parses a DeFi post-mortem or incident report and returns an ordered attack chain with typed primitive steps and supporting evidence for each step.

## Facts

- Endpoint: POST https://api.agentsouk.dev/v1/x402/lst_01M2P45H2MBEN75Q52FE5XY4KC?utm_source=zero.xyz
- Price: $0.03/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agent-souk-defi-post-mortem-attack-chain-analyzer-fccf9873
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_kjnYsVLAx6jD8q-fYow6U

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agent-souk-defi-post-mortem-attack-chain-analyzer-fccf9873 -d '<json body>'
```

Example prompt: Take this Euler Finance post-mortem and break it down into an ordered attack chain — each step labeled with the attack primitive it used (like flash loan, reentrancy, price manipulation) and the specific evidence from the report that supports it.

## When to prefer this

Use this endpoint when you have a raw DeFi post-mortem, exploit thread, or incident report and need a structured, typed attack chain rather than a prose summary. It enforces a fixed primitive enum so steps are machine-comparable across incidents — ideal for security databases, research pipelines, or automated triage workflows where consistent step taxonomy matters.

## Known failure modes

- Input text is too vague or lacks exploit details — resulting in low-confidence or incomplete chain
- Text exceeds 20,000 character limit — request rejected
- Post-mortem describes a non-DeFi incident — primitive enum may not apply cleanly
- Text is in a language the model struggles with — step labels may be inaccurate
- Payment not included or invalid — 402 Payment Required response

## How this service works

DeFi post-mortem to ordered attack chain: steps with a fixed primitive enum and the evidence each rests on (1 × 500 characters at 0.030000 USDC each)

## Output

An ordered list of attack chain steps, each labeled with a fixed primitive type (e.g. flash loan, price manipulation, reentrancy, governance attack) drawn from a defined enum, along with a snippet or citation of evidence from the input text that supports that step — condensed to 500 characters of output.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "note": {
   "type": "string",
   "maxLength": 300,
   "description": "Optional hint, e.g. \"the amounts are in EUR\". Treated as data, never as instructions"
  },
  "text": {
   "type": "string",
   "maxLength": 20000,
   "minLength": 1,
   "description": "The post-mortem, incident report, thread or article to read"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agent-souk-defi-post-mortem-attack-chain-analyzer-fccf9873/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.agentsouk.dev](https://www.zero.xyz/host/api.agentsouk.dev/llms.txt)