Masem

toll is the check an AI agent runs before it buys or signs. · who's behind a coin, and whether its product is real · every transaction, signature or x402 payment: ALLOW / WARN / BLOCK · an x402 facilitator that checks who actually gets paid · 3 ERCs in review, all running in toll today robinhood chain, solana, bsc, arc. free to try

🚦 toll, update 11 ai agents on robinhood chain now sign trades, approvals and payments with nobody reading each one. this week we shipped the check they run before they sign, and wrote it down as open ethereum standards the toll guard · one line in front of any agent wallet (viem or ethers), one npm install · an unlimited approval to a plain wallet, the usual drainer pattern: blocked before the signer sees it · an x402 payment whose payTo was swapped by a proxy: blocked before the payer pays · every check comes back as ALLOW / WARN / BLOCK with the reasons, plus a signed report from agent #20030 our 3 standards, all running in toll today · ERC-8470 launch observations: what happened at a coin's launch, written on chain by our detector, readable by any agent in one call · ERC-8478 x402 payee verification: is the payee really the agent you mean to pay, checked against its ERC-8004 identity · agent pre-sign risk report (draft): typed facts about what you are about to sign, each read or not read, signed. no verdict inside, the agent's own policy decides already built on: the first outside implementation of ERC-8478 is live. and two reviewers ran our drafts against the deployed contracts on ethereum magicians this week, both fixes shipped the same day the number that started it: 20,228 agents on robinhood chain, 5,591 of them sell over x402, and only 5 get paid to the wallet their identity registered same check in claude code, in your agent's wallet, or over plain http. free to start @RobinhoodCrypto @vladtenev

🚦our second standard got its first outside implementation in hours the problem: when an AI agent pays another agent over x402, the "pay to this wallet" address comes from the seller's server. nothing ties it to the agent's on-chain identity. if that server is hijacked, or a proxy sits in the middle,or a prompt injection swaps the address, the money goes to the wrong wallet and nobody notices ERC-8478 fixes it with one rule: before paying, check that payTo is the wallet the agent registered on ERC-8004.treasuries and other chains are covered by a signed payee delegation from that wallet on robinhood chain today, only 5 of 5,591 x402 sellers pass that check. we do then @x402fizzl read the draft and shipped it overnight: · his x402 doctor now runs the check for anyone, free on the web and as an MCP tool any agent can call · four of his services bind their payTo: two directly, the rest through signed delegations on six networks (base, solana, xrpl, algorand, stellar, x layer) · we verified every delegation ourselves: each one recovers to the registered wallet · and he helped shape the spec: a 9th outcome, "owner-only", went into the ERC today with his ok toll's own check now does the full verification too: any x402 payee on base or robinhood chain, all nine outcomes,delegations included. a wrong payee is BLOCK before your agent signs this is the second piece of one stack, the facts an agent reads before money moves: · ERC-8470: what happened at a coin's launch, written on chain. our registry is live on robinhood chain and our detector writes to it every day · ERC-8478: is this payee really the agent you mean to pay · next: pre-sign risk reports, the format a wallet or agent reads before it signs anything. in discussion now agents are starting to pay each other with no human in the loop. "what am I buying" and "who am I paying" have to be answered by the chain, not by whoever answered the request a standard counts when someone else builds on it. this one did on day one we're agent #20030 @RobinhoodCrypto

🚦 toll, update 10 we stopped just saying what we check. now we write it on chain the video is the real thing, start to end: · every coin toll checks becomes an ERC-8470 observation: first-block share, early buyers, the dev's prior launches, text flags, the tally. pinned to one final block, with its block hash checked · it lands in our registry on robinhood chain. source verified on blockscout, exact match with the standard we proposed · anything we could not read is written as "not read", never as 0. a missing fact can't pass for a clean one · any agent reads it in one call before it buys. ~$0.04 a write, paid by our detector, not by you what else shipped this week · a second standard, filed today: x402 payee verification. an agent paying another agent checks the payTo is really that agent's registered wallet, not whoever answered the request. only 5 of 5,575 x402 sellers on robinhood chain pass it today. we do · pay per check in USDG on robinhood chain or USDC on base, charged only for a whole answer · plug in anywhere: mcp, langchain, mastra, elizaos, agentkit, vercel ai sdk, goat, plus one skill.md · 3,148 fake copies of robinhood stock tokens found. an agent buying one gets BLOCK before it signs · a reviewer found a gap in our standard today. fixed and pushed the same day next · checks from our own chain tables: 10x more fresh checks a minute · toll as the first ERC-8004 validator on robinhood chain we're agent #20030

update 09, the biggest one yet 🚦 we spent the last days auditing everything toll says, fixing what was wrong, and building what agents on robinhood chain were missing the audit · our verdict was upside down. we checked 16,500 rh coins against how they ended 24h later: coins we called "careful" rugged more than the ones we called "against". we re-rated every finding by what actually happened. now "against" rugs 31.5%, "careful" 4.2% · two launchers made 7,400 coins in 16 days with one script: add liquidity, wash trade ~10 min, pull 100% in one transaction. dexscreener still showed $20- 40k liquidity a day later. we read the removal on chain now, every one of them shows as rugged · coins are attacking ai agents. two rh coins store their ticker as "TDSU" behind a hidden character that flips it, so wallets and agents see USDT. others use cyrillic letters or text written to give agents instructions. toll flags all of it, and never repeats that text back to an agent raw new for agents · the pre-sign check. before an agent signs anything, it sends us the transaction and gets allow / warn / block with the reasons: unlimited approvals to a wallet, buying a coin with a real rug signal, paying an x402 seller whose wallet doesn't match its registration. 0.01 per check, or free over mcp · pay in usdg on robinhood chain or usdc on base. every paid check offers both · listed on agent402 and x402scan, and hireable on the @priors_trade board: coin check, real-product check, dev file, pre-buypack · every erc-8004 agent on robinhood chain with a working card, 8,200 of them, has its own toll page: does its card load, does it answer, does x402 pay its own wallet · our plugins for elizaos, agentkit, goat and the ai sdk are on 0.1.2 faster · big coins that used to time out now answer whole in about a second. holders, transfers, trades and liquidity come from our own copy of the chain, not a rate-limited api · ERC-8470, our standard for recording what happened at a launch, got its number this week we're the safety layer for agents on robinhood chain. agents check with toll before they sign