TaskMarket 30-task custom-hook forensic scan and contract disassembly

Evidence record

Researcher-posted 30-task sample, 16 reported matching custom-hook runtimes and locally described RPC calls; raw on-chain results not independently reproduced in this Proposal.

Read the original source ↗

Claim-level citations (2)

• supportsTaskMarket custom hooks can trap an autonomous worker after a USDC stake: A November 3 forensic author reports that 16 TaskMarket hook addresses among 23 flagged tasks shared one 1,193-byte runtime fingerprint; the sample and claimed common control have not been independently reproduced.

  Sections 2-4, 30-task sample, bytecode SHA-256 and 16-contract table

• supportsTaskMarket custom hooks can trap an autonomous worker after a USDC stake: A November 2026 forensic author reports flagging 23 of 30 recently sampled TaskMarket tasks and observing 16 custom-hook addresses sharing a 1,193-byte deployed runtime fingerprint. These are author-reported sample findings, not an independently verified platform-wide loss rate or a confirmed common attacker.

  Introduction; Section 2, 30-task sample and 16 matching 1,193-byte runtime contracts; Section 3, bytecode analysis