EVM wallet risk scoring — transaction patterns, exposure analysis, suspicious activity

[
  {
    "scheme": "exact",
    "network": "eip155:8453",
    "payTo": "0x52Ab53912D37759B2ad364f22dD06B16714b6C06",
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "amount": "150000",
    "maxTimeoutSeconds": 300
  },
  {
    "scheme": "exact",
    "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
    "payTo": "3nmeVj5m9Uq2hSTfsVsn3tJMHRJQNMKR1AjzyUJbrSgw",
    "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
    "amount": "150000",
    "maxTimeoutSeconds": 300
  }
]

{
  "bazaar": {
    "info": {
      "input": {
        "method": "GET",
        "queryParams": {
          "address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
          "chain": "eth",
          "contract": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
          "token": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
          "wallet": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
        },
        "type": "http"
      },
      "output": {
        "example": {
          "address": "0x1da5821544e25c636c1417ba96ade4cf6d2f9b5a",
          "balance": 0,
          "balance_symbol": "ETH",
          "chain": "eth",
          "flag_sources": "SlowMist,BlockSec",
          "is_contract": true,
          "risk_flags": [
            "sanctioned",
            "stealing_attack",
            "blacklist_doubt"
          ],
          "risk_label": "critical",
          "risk_score": 10,
          "summary": "0x1da58215...f9b5a on ETH: Risk 10/10 (critical) | Flags: sanctioned, stealing_attack",
          "tx_count": 0
        },
        "format": "json",
        "type": "object"
      }
    },
    "schema": {
      "category": "data",
      "description": "On-chain wallet risk scorer for EVM addresses. Returns a 0–10 risk score and list of flags: sanctioned, mixer, phishing, darkweb transactions, money laundering, stealing attack, and more. Powered by GoPlus Security + live RPC data. Supports Ethereum, Base, BSC, Arbitrum, and Polygon.",
      "name": "LoneStarOracle — WalletRisk",
      "properties": {
        "input": {
          "properties": {
            "method": {
              "enum": [
                "GET",
                "HEAD",
                "DELETE"
              ],
              "type": "string"
            },
            "queryParams": {
              "properties": {
                "address": {
                  "title": "Address",
                  "type": "string"
                },
                "chain": {
                  "default": "eth",
                  "title": "Chain",
                  "type": "string"
                },
                "contract": {
                  "title": "Contract",
                  "type": "string"
                },
                "token": {
                  "title": "Token",
                  "type": "string"
                },
                "wallet": {
                  "title": "Wallet",
                  "type": "string"
                }
              },
              "type": "object"
            },
            "type": {
              "const": "http",
              "type": "string"
            }
          },
          "required": [
            "type",
            "method"
          ],
          "type": "object"
        },
        "output": {
          "properties": {
            "example": {
              "address": "0x1da5821544e25c636c1417ba96ade4cf6d2f9b5a",
              "balance": 0,
              "balance_symbol": "ETH",
              "chain": "eth",
              "flag_sources": "SlowMist,BlockSec",
              "is_contract": true,
              "risk_flags": [
                "sanctioned",
                "stealing_attack",
                "blacklist_doubt"
              ],
              "risk_label": "critical",
              "risk_score": 10,
              "summary": "0x1da58215...f9b5a on ETH: Risk 10/10 (critical) | Flags: sanctioned, stealing_attack",
              "tx_count": 0
            },
            "type": {
              "type": "string"
            }
          },
          "required": [
            "type"
          ],
          "type": "object"
        }
      },
      "required": [
        "input"
      ],
      "tags": [
        "wallet",
        "risk",
        "security",
        "scam",
        "sanctions",
        "defi",
        "aml"
      ],
      "type": "object",
      "version": "1.0.0"
    }
  },
  "bc_kg64bd18": {}
}

curl "https://wallet.lonestaroracle.xyz/score"
# -> 402 Payment Required, accepts[] lists how to pay
# retry with a PAYMENT-SIGNATURE (or PAYMENT header) once paid

const res = await fetch("https://wallet.lonestaroracle.xyz/score");
if (res.status === 402) {
  const { accepts } = await res.json();
  // pay one of accepts[] via an x402 client, then retry with the payment header
}

import httpx
res = httpx.get("https://wallet.lonestaroracle.xyz/score")
if res.status_code == 402:
    accepts = res.json()["accepts"]
    # pay one of accepts[] via an x402 client, then retry with the payment header