{"id":"agent.blast_radius.v1","title":"Blast radius: what a stolen agent key could move right now","unit":"USD at the block of measurement, split into parts","chain_set":"eip155:8453 (Base)","window":"one block (the latest at measurement); approvals as of the ledger's daily approvals view","definition":"For one bound wallet, the blast radius is the sum of (a) its stablecoin balances (USDC, EURC, DAI, USDT) priced at the block, and (b) its exposure through standing ERC-20 approvals, counted per token as the smaller of the allowance and the wallet's balance of that token (so an unlimited approval exposes at most what the wallet holds), listed per spender with whether the spender is a contract or a plain key; plus (c) the facts that widen it without adding dollars: an EIP-7702 delegation (the delegate code controls the account) and its known family, and unpriced assets held (ETH, WETH, cbBTC) reported by symbol.","method":"eth_call balanceOf on the four stablecoin contracts and the known-token list; allowance(owner, spender) for every spender the approvals view lists for the wallet, confirmed live; eth_getCode on the wallet for the 7702 designation and on each spender for its kind; research/sweepers.json for the delegate family. Exposure is capped per token and is not added to the balance total (it is a second line: 'could move' versus 'holds').","excludes":["Native ETH and non-stablecoin tokens from the USD total (listed as unpriced).","Approvals the view does not know (older than 30 days or on other tokens).","Positions held in protocols (own_position payments): not a balance the key can move with one transfer."],"does_not_assert":["That the key is stolen or at risk.","That an unlimited approval to a router is a problem: it is how routers work; the plain-key spender is the shape to read.","The value of unpriced assets."],"assumptions":["balanceOf and allowance answer at the same block (one measurement).","The approvals view is complete for the last 30 days."],"known_gaps":["No price source for ETH, WETH and cbBTC in the lab; the production version takes a reference price with its time.","Permit2 allowances are not read.","A 7702 delegate's capabilities are read as a fingerprint, not executed."],"intended_use":"A number for the operator next to a canary fire or a Gate block: what rotating the key now would protect; and a fleet-wide distribution for the Desk.","not_intended_for":"Solvency, creditworthiness, or any statement about the operator.","cost_to_fake":"Balances and allowances are read from the chain at a block and cannot be understated by the wallet's owner; they can be reduced in earnest (revoke, withdraw), which is the point.","threat_model":"Assume the model behind an agent can be steered by text it reads (a prompt injection, a poisoned tool result, a planted memory): every signal here is measured from the chain and our ledger, never from what the agent says, and nothing here is a verdict on an agent, an operator or a person.","source":"afg-security-lab blast/ (radius.mjs, SAMPLES.md, DISTRIBUTION.md), 2026-10-14; production: AFG-Pulse (afg-oochar, afg-intake gate routes), 16 Oct 2026","since":"2026-10-16","status":"registered 16 Oct 2026; measured per bound wallet of ranked agents","revisions":[],"body_sha256":"ac7d34c58f9802a6ee0c65f3bd15980e95476a7a8ef4560646a95de9bbafa4ad","url":"https://agenticfinancegraph.com/def/agent.blast_radius.v1","ladder":"https://agenticfinancegraph.com/ai-agent-liveness-methodology-l0-l9-ladder","license":"https://creativecommons.org/licenses/by/4.0/","attribution":"Agentic Finance Graph — https://agenticfinancegraph.com"}