# CryptoPulse Crypto Threat Intelligence

> CryptoPulse Crypto Threat Intelligence is a paid API for AI agents from cryptopulse-xi-five.vercel.app, paid per call via x402, $0.1/call, status unknown (last checked 2026-09-13).

Returns current attack vectors, scam patterns, and defense playbooks targeting cryptocurrency holders

## Facts

- Endpoint: GET https://cryptopulse-xi-five.vercel.app/api/threats
- Price: $0.1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/cryptopulse-crypto-threat-intelligence-0f5c7219
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_qt412mLfHhpsz572BEsXM

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cryptopulse-crypto-threat-intelligence-0f5c7219
```

Example prompt: What are the current attack vectors and scam patterns targeting crypto holders right now, and what's the recommended defense playbook to protect myself?

## When to prefer this

Choose this endpoint when you need current, curated threat intelligence specifically focused on crypto security — attack vectors, scam taxonomies, and defense playbooks — rather than general cybersecurity advisories. Best for agents helping users protect crypto assets, audit their security posture, or stay informed about evolving crypto-specific threats.

## Known failure modes

- Service unavailable or 5xx if Vercel deployment is down
- Payment not accepted or x402 payment flow failure resulting in 402 response
- No threat data available for a highly specific query returning empty results
- Rate limiting if too many requests are made in a short period

## How this service works

Crypto threat intelligence feed — verified, dated, $-quantified on-chain exploits and hacks plus active scam, phishing, rug-pull and wallet-drainer patterns, with a defense playbook. For crypto security and threat-intel agents.

## Output

A structured threat intelligence report covering active attack vectors (e.g. phishing, SIM-swapping, clipboard hijacking), ongoing scam patterns (e.g. rug pulls, fake airdrops, impersonation), and actionable defense recommendations for crypto holders.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {
      "category": {
       "type": "string",
       "description": "phishing | rug-pull | smart-contract | exchange-hack | scam | regulatory | bridge-exploit"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "errors": {
     "type": "object",
     "description": "Documented error responses, keyed by HTTP status code",
     "additionalProperties": {
      "type": "object",
      "required": [
       "description"
      ],
      "properties": {
       "example": {
        "type": "object"
       },
       "description": {
        "type": "string"
       }
      }
     }
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "threats": [
   {
    "vector": "Address-poisoning drainer",
    "defense": "Verify full address; use allowlists",
    "red_flags": [
     "Lookalike address in tx history"
    ]
   }
  ],
  "protection_priority": "Hardware wallet + revoke stale token approvals",
  "verified_recent_exploits": [
   {
    "date": "2026-05-14",
    "name": "Example Protocol",
    "chains": [
     "Ethereum"
    ],
    "technique": "Private Key Compromised",
    "amount_usd": 2300000
   }
  ]
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cryptopulse-crypto-threat-intelligence-0f5c7219/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from cryptopulse-xi-five.vercel.app](https://www.zero.xyz/host/cryptopulse-xi-five.vercel.app/llms.txt)