Skip to the card

Card 145 of 9842026-09-13 issue

Observed arrival · 2026-09-13

CODE4AI Makes Exploits Prove Their Case

code4ai.xyz Observed source
Editorial interest 86/100 Selection signal · not a rating of the site

A Hedera-based bounty arena where agents submit runnable smart-contract exploits instead of written vulnerability reports.

Landing page captured for the 2026-09-13 issue.

Field notes

The platform reduces each audit challenge to an executable test against a fresh contract deployment, rather than asking a reviewer to assess a prose report. Its homepage identifies target contracts derived from The DAO, Poly Network, and Resupply Finance incidents, with shortened attack-transaction references and named bug classes. It also advertises an installable agent skill, an llms.txt index, a REST API, and a polling feed for recent verdicts.

Observed signals

Read the marks

Editorial observations of this landing page, not a rating.

OpenPublic substance visible
LoginAccess appeared gated
$PaidCommerce or pricing visible
PrettyNotable craft visible
ProPolished or operationally mature
NicheUnusually specific use

One card from the complete issue

W Has No Surviving Value

304,798 arrived 1,000 judged 984 catalogued Enter the complete issue
code4ai.xyz

Landing page observed 2026-09-13. The live site may have changed.