{"id":"poison.losses.v2","title":"Agent payments to planted look-alike addresses","unit":"payments","chain_set":"eip155:8453 (Base)","window":"all time since the watch's first block (120 days before 3 Oct 2026)","definition":"Real-token payments (value above zero) from a watched wallet to an address that had received a poisoning transfer (poison.events.24h.v2 rule) from that wallet earlier, and that the wallet had never paid before that first poisoning transfer, where the transaction that planted the address was sent by someone other than the wallet and the address has no contract code (both read from the chain; a payment to a new deployment of a contract the wallet already used is an upgrade, not a loss). Each one is counted only after Blockscout's index shows the same transfer (sender, recipient, token and amount), a second source independent of the log query.","method":"Every Base wallet that has made at least one counted agent payment (money_events kind PAY), with the payees it has paid. One eth_getLogs per 2,000 wallets returns every ERC-20 Transfer whose sender is one of them, from any token contract. Second check: base.blockscout.com transaction token-transfers.","excludes":["Payments Blockscout has not confirmed yet (retried every hour).","Look-alikes the wallet paid without them being planted in its history first."],"does_not_assert":["That the payment was not intended: an operator could pay any address on purpose.","That the money cannot be recovered."],"source":"AFG-Pulse poisoning watch","since":"2026-10-12","validation":"Measured on 12 Oct 2026 against Tsuchiya, Dong, Soska & Christin, Blockchain Address Poisoning (USENIX Security 2025): of 82,132 plants either rule counts, rule v1 counted 80,509 and the paper's first-3 + last-4 rule 80,880; v2 counts all of them. A second, independent read from the chain on a random sample of 300 counted plants found every one sent by somebody other than the wallet (directly or through an ERC-4337 UserOperation) to an address without contract code; the same check on 50 zero-value plants that only the 3 + 4 rule catches found the same. Incoming tiny transfers (look-alike to wallet, a real token, under 10 USD), the paper's third kind, are not read by this watch.","revisions":[{"date":"2026-10-12","what":"From 22:10 UTC the second, independent read of a loss falls back to the transaction receipt from Base's public RPC nodes (mainnet.base.org, then base-rpc.publicnode.com), operated separately from the log provider, when Blockscout's Base API refuses our requests (it answers our collector with a Cloudflare challenge since 12 October 2026). Each loss records which source confirmed it (verified_by)."}],"body_sha256":"e7121665f3f944ba3af37f2af01d399bb7a42cf176f17d63884c2f627437cca2","url":"https://agenticfinancegraph.com/def/poison.losses.v2","ladder":"https://agenticfinancegraph.com/ai-agent-liveness-methodology-l0-l9-ladder","license":"https://creativecommons.org/licenses/by/4.0/","attribution":"Agentic Finance Graph — https://agenticfinancegraph.com"}