RektWatch

# List all protocols and pick a slug curl https://rektwatch.dev/protocols | jq '.[0:3] | .[] | {slug, incident_count}' # Check data freshness across all sources curl https://rektwatch.dev/health

import { privateKeyToAccount } from "viem/accounts" const signer = privateKeyToAccount("0xYOUR_PRIVATE_KEY") // needs USDC on Base mainnet async function paidFetch(url: string) { const first = await fetch(url) if (first.status !== 402) return first.json() // x402 v2: payment requirements live in the Payment-Required header (base64 JSON) // The 402 body is intentionally empty — do NOT call res.json() on a 402 const reqs = JSON.parse(Buffer.from(first.headers.get("payment-required")!, "base64").toString()) const req = reqs.accepts.find((a: any) => a.scheme === "exact" && a.network === "eip155:8453") const now = Math.floor(Date.now() / 1000) const nonce = ("0x" + Buffer.from(crypto.getRandomValues(new Uint8Array(32))).toString("hex")) as `0x${string}` const sig = await signer.signTypedData({ domain: { name: req.extra?.name ?? "USD Coin", version: req.extra?.version ?? "2", chainId: 8453, verifyingContract: req.asset, }, types: { TransferWithAuthorization: [ { name: "from", type: "address" }, { name: "to", type: "address" }, { name: "value", type: "uint256" }, { name: "validAfter", type: "uint256" }, { name: "validBefore", type: "uint256" }, { name: "nonce", type: "bytes32" }, ]}, primaryType: "TransferWithAuthorization", message: { from: signer.address, to: req.payTo as `0x${string}`, value: BigInt(req.amount), nonce, validAfter: BigInt(now - 60), validBefore: BigInt(now + (req.maxTimeoutSeconds ?? 300)), }, }) const payment = Buffer.from(JSON.stringify({ x402Version: reqs.x402Version, accepted: req, // ← required: the matched entry from Payment-Required.accepts payload: { signature: sig, authorization: { from: signer.address, to: req.payTo, value: req.amount, // string, e.g. "20000" nonce, validAfter: String(now - 60), // stringified integer, not a number validBefore: String(now + (req.maxTimeoutSeconds ?? 300)), }, }, })).toString("base64") return (await fetch(url, { headers: { "Payment-Signature": payment } })).json() } // Step 1: get valid slugs — free, no wallet needed const protocols = await fetch("https://rektwatch.dev/protocols").then(r => r.json()) // Note: paid endpoints return 402 (not 404) for unknown slugs — always validate slugs here first // Step 2: call paid endpoints using slugs from /protocols const score = await paidFetch("https://rektwatch.dev/protocol/aave-v3/risk-score") const summary = await paidFetch("https://rektwatch.dev/protocol/uniswap-v3/security-summary") const compare = await paidFetch("https://rektwatch.dev/compare?a=aave-v3&b=compound-v3")