# DeFi Signal API — Vulnerability Pattern Search

> DeFi Signal API — Vulnerability Pattern Search is a paid API for AI agents from wazir-x402.duckdns.org, paid per call via x402, $0.005/call, status unknown (last checked 2026-10-10).

Searches a curated dataset of smart contract vulnerability patterns from DeFi audit contests, returning categorized findings with acceptance rates

## Facts

- Endpoint: GET https://wazir-x402.duckdns.org/api/vuln-search?utm_source=zero.xyz
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-10
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/defi-signal-api-vulnerability-pattern-search-339d96d4
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_2p7EcLF-HpAGZMFyd8JIV

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability defi-signal-api-vulnerability-pattern-search-339d96d4
```

Example prompt: Search the DeFi vulnerability pattern database for reentrancy issues found in Base and Arbitrum protocols, and show me the acceptance rates per category from past audit contests.

## When to prefer this

Choose this endpoint when you need to search a curated, contest-validated dataset of DeFi smart contract vulnerabilities with acceptance-rate metadata, particularly for protocols on Base, Arbitrum, Optimism, or Solana. Prefer this over generic CVE databases when your use case is specifically DeFi/Web3 smart contract security research or audit preparation.

## Known failure modes

- Malformed or missing search properties parameter returns empty or error response
- Overly broad queries may return unranked large result sets
- No results found for niche or unsupported chain/vulnerability combinations
- API unavailability due to dynamic DNS host (duckdns.org) downtime
- Payment failure via x402 protocol results in 402 status and no data returned

## How this service works

Unieke bot-data van live DeFi-scanners op Base, Arb, OP en Solana

## Output

Returns a JSON object containing matched vulnerability patterns from a dataset of approximately 1,032 reconciled findings across 10 audit contests, including categorized results and acceptance rates per vulnerability category.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "properties": {
   "type": "string"
  },
  "additionalProperties": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "note": "3ilm vulnerability pattern search — 1.032 exact-reconciled findings, 10 contests, acceptance rates per category"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/defi-signal-api-vulnerability-pattern-search-339d96d4/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from wazir-x402.duckdns.org](https://www.zero.xyz/host/wazir-x402.duckdns.org/llms.txt)