# CryptoPulse Threat Intelligence Feed

> CryptoPulse Threat Intelligence Feed is a paid API for AI agents from cryptopulse.theaslangroupllc.com, paid per call via x402, $0.1/call, status unknown (last checked 2026-09-13).

Returns a verified, dated, dollar-quantified feed of on-chain exploits and hacks plus active scam, phishing, rug-pull, and wallet-drainer patterns with a defense playbook.

## Facts

- Endpoint: GET https://cryptopulse.theaslangroupllc.com/api/threats
- Price: $0.1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/cryptopulse-threat-intelligence-feed-7c2fa5e6
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_ptpBayrAfY7CBgBkGv_nq

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cryptopulse-threat-intelligence-feed-7c2fa5e6
```

Example prompt: Pull the latest crypto threat intelligence feed — I want to see all verified on-chain exploits and hacks with dollar amounts lost, plus any active scam, phishing, rug-pull, and wallet-drainer patterns, and the recommended defense steps for each.

## When to prefer this

Choose this endpoint when you need a curated, verified, financially-quantified threat intelligence feed specifically for the crypto and blockchain domain, covering exploits, scams, phishing, rug-pulls, and wallet-drainers with defensive guidance — rather than a generic contract scanner (which checks a specific token address) or a real-time market data feed. Ideal for crypto security agents, threat monitoring dashboards, and DeFi protocol defense workflows.

## Known failure modes

- Payment not processed (402 response if x402 payment header is missing or invalid)
- Rate limiting if called too frequently
- Empty or sparse feed if no new threats have been verified recently
- Network timeout if the threat data aggregation backend is slow
- Stale data if the feed has not been updated recently

## How this service works

Crypto threat intelligence — active scam, phishing, rug-pull and wallet-drainer patterns sourced from live web intelligence, with red flags and a prioritized defense playbook. For crypto security and threat-intel agents.

## Output

A structured feed of verified, dated, dollar-quantified on-chain exploits and hacks alongside active scam, phishing, rug-pull, and wallet-drainer threat patterns; each entry includes verification status, financial impact figures, dates, and an associated defense playbook with actionable mitigation steps for crypto security practitioners and agents.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {
      "category": {
       "type": "string",
       "description": "phishing | rug-pull | smart-contract | exchange-hack | scam | regulatory | bridge-exploit"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "errors": {
     "type": "object",
     "description": "Documented error responses, keyed by HTTP status code",
     "additionalProperties": {
      "type": "object",
      "required": [
       "description"
      ],
      "properties": {
       "example": {
        "type": "object"
       },
       "description": {
        "type": "string"
       }
      }
     }
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "threats": [
   {
    "vector": "Address-poisoning drainer",
    "defense": "Verify full address; use allowlists",
    "red_flags": [
     "Lookalike address in tx history"
    ]
   }
  ],
  "protection_priority": "Hardware wallet + revoke stale token approvals"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cryptopulse-threat-intelligence-feed-7c2fa5e6/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from cryptopulse.theaslangroupllc.com](https://www.zero.xyz/host/cryptopulse.theaslangroupllc.com/llms.txt)