Case · DiggingBeagle record

Priors agent finance caps could be released despite a broadcast transaction

Priors agent finance functions classified several post-broadcast RPC or receipt failures as if the transaction had never been sent. Releasing the budget too early could permit a second transaction even when the first later settled, defeating the intended cap.

Scope

The user needs an agent-controlled borrow or bridge flow subject to a spending cap and an ambiguous remote chain response after broadcast. This is a controlled mocked chain scenario, not evidence that a real user incurred two loans.

Assessment profile

Assessment method
Setting
research demonstration
Exploitation
demonstrated
Evidence
Grade B
Remediation
patch available
AI role
AGAINST AI
Basis and provenance

The cited primary technical report or advisory supports the stated mechanism within its reported scope. The assessment does not infer a production breach, a victim count or a comparable impact score from a laboratory result. A maintainer or advisory names a patched release; that does not prove every deployed instance has updated. Boundary: A transaction broadcast and the receipt of its confirmation are different events.

Assessed Oct 29, 2026 using diggingbeagle.assessment/1.

At a glance

Mechanism and trust boundary

  1. 01

    Step

  2. 02

    Step

  3. 03

    Step

Timeline

  1. Oct 26, 2026
    disclosure

    Public disclosure

Claims & evidence

CLM-ENRICH-20261029-28The Priors advisory demonstrates a borrow or bridge spend-cap accounting bypass when a transaction had already been broadcast but a later receipt or RPC retry failure was classified as a pre-send refusal.supported

Basis: reported finding

Link to claim
CLM-CP23-PRIORS-BROADCAST-RECEIPT-1Priors agent finance functions classified several post-broadcast RPC or receipt failures as if the transaction had never been sent. The user needs an agent-controlled borrow or bridge flow subject to a spending cap and an ambiguous remote chain response after broadcast. Releasing the budget too early could permit a second transaction even when the first later settled, defeating the intended cap.supported

Basis: reported finding

Link to claim

Implications

Releasing the budget too early could permit a second transaction even when the first later settled, defeating the intended cap.

Controls and mitigations

  • Keep cap reservations pending until verified chain settlement or an explicit reconciled failure and use patched Priors MCP/x402 releases.

Unknowns and contradictions

  • This is a controlled mocked chain scenario, not evidence that a real user incurred two loans.

Sources and citation

Material revision history

  1. Oct 29, 2026 · Canonical change recorded · new in release · revision 202