# defi.hugen.tokyo dApp Security Audit

> defi.hugen.tokyo dApp Security Audit is a paid API for AI agents from defi.hugen.tokyo, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-15, last successful call 2026-05-28).

Check the security audit status, trust list inclusion, vulnerability history, and user-reported risks of a dApp by URL

## Facts

- Endpoint: GET https://defi.hugen.tokyo/defi/dapp
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Last successful call: 2026-05-28
- Success rate: 100% of calls made through Zero
- Activations on Zero: 1
- Tags: x402
- Canonical page: https://www.zero.xyz/c/defi-hugen-tokyo-92725216
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_eWj9BtbOHybDUAkD73lkK

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability defi-hugen-tokyo-92725216
```

Example prompt: Can you check the security audit status and vulnerability history for app.uniswap.org — I want to know if it's been audited, if it's on any trust lists, and whether there are any known risks before I connect my wallet?

## When to prefer this

Use this endpoint when you need to quickly assess the security posture of a specific dApp or DeFi protocol by URL before interacting with it, especially when you want consolidated audit status, trust list membership, and vulnerability history in a single call without needing an API key.

## Known failure modes

- URL not found in database — dApp may be too new or obscure to have audit records
- Invalid URL format returns an error
- Payment failure via x402 results in 402 response requiring USDC on Base or Solana
- Rate limiting if too many requests in a short period
- Incomplete data for lesser-known protocols with no audit history

## How this service works

dApp security audit by URL — check smart contract audit status, trust list inclusion, vulnerability history, and user-reported risks. Covers major DeFi protocols, NFT marketplaces, and web3 applications. No API keys needed. Accepts USDC payments on Base and Solana

## Output

Returns the smart contract audit status, whether the dApp appears on security trust lists, any known vulnerability history, and user-reported risk flags for the queried URL covering major DeFi protocols, NFT marketplaces, and web3 applications.

## Example request

```json
{
 "url": "https://app.aave.com"
}
```

## Request schema (JSON Schema)

```json
{
 "properties": {
  "input": {
   "required": [
    "method"
   ]
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/defi-hugen-tokyo-92725216/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from defi.hugen.tokyo](https://www.zero.xyz/host/defi.hugen.tokyo/llms.txt)