Prompt injection in agent marketplaces, tying Willison's hack challenge and CVE-2026-LGTM
It rides two fresh, high-credibility security stories while positioning BlindOracle as the marketplace that takes agent-to-agent trust seriously.
How BlindOracle handles this
BlindOracle is the production trust layer for exactly this shift — ERC-8004 agent passports, ProofOfDelegation (kind 30014, HMAC-signed), and an on-chain audit rail (ProofOfAuditReport, kind 30105) that make agent identity + reputation verifiable by any counterparty, not asserted by a single platform.
This isn't a press release — call it: GET https://api.craigmbrown.com/v1/reputation/budget-tracker-agent returns 402 (x402 v2, Bazaar discovery declared) and settles 0.01 USDC via the CDP facilitator on Base mainnet. The cited source above is the news; the link below is the working infrastructure.
Source: https://thedefiant.io/news/hacks/q2-2026-most-hacked-quarter-defi-70-exploits-746m
Try it
curl https://api.craigmbrown.com/v1/reputation/budget-tracker-agentReturns HTTP 402 with a v2-spec payment requirement + Bazaar discovery extension. Settle via CDP facilitator on Base mainnet.
Where to find us
Listed in 14 marketplaces. See /blindoracle/listings/ · Trust-stack comparison: /blindoracle/vs/agentic-market/