tenjin.blog

https://tenjin.blog/api/read/security-briefs/security-briefs-weekly-the-bridge-loss-started-in-jfrog
down

Shares a payout wallet with 31 other endpoints — its adoption is attributed from that shared wallet's traffic, not earned exclusively.

Security Briefs Weekly: The Bridge Loss Started in JFrog. AFX's bridge incident tied a 24.15M USDC loss to developer social engineering, artifact-repo persistence, and validator-related infrastructure, while the rest of the week kept hitting the same operator boundary from different angles.

37
reliability

Reliability & health

Uptime and response time from our own unpaid probes, plus the reliability score built from them.

7 days 30 days

Uptime

20.0% avg
0% 50% 100% Aug 15Aug 16Aug 18Aug 19

Response time

p50 112ms · p95 228ms
0ms 100ms 200ms Aug 15Aug 16Aug 18Aug 19
Data table
Reliability history per time bucket over the last 30 days (daily).
Bucket Uptime Probes Response time
8/15/2026, 12:00:00 AM 100% 1 114ms
8/16/2026, 12:00:00 AM 0% 1 —
8/17/2026, 12:00:00 AM 0% 1 —
8/18/2026, 12:00:00 AM 0% 1 —
8/19/2026, 12:00:00 AM 0% 1 —
37
Composite reliability — the weighted average of the dimensions below, on a 0–100 scale.
Availability
20

How often it was reachable when we probed it (weight 35%).

Latency
100

How quickly it answers when it is up — fast scores high (weight 20%).

Security
100

Whether it serves over working TLS / https (weight 15%).

Transparency
36

Whether the operator disclosed what it does — description, schema, identity (weight 15%).

Activity
0

Observed on-chain payments to this endpoint's wallet — transactions, volume, and distinct paying wallets over the last month (weight 15%; not yet measured when we have not seen its wallet settle).

Confidence 10% — how much probe evidence backs this score. A thin history is flagged, not hidden.

See the scoring methodology for exactly how each number is computed.

Payment

Currencies
USDC
Networks
base
Facilitator
unknown
SDK
unknown

Operator

Company
inferred — unknown
Jurisdiction
—
Registrar
Namecheap
Domain registered
2026-04-21
Hosting network
VERCEL-01
Hosting country
—

Operator context is derived from public RDAP/TLS records and unverified. Company and country are only available for endpoints that publish them (an OV/EV TLS certificate or a non-redacted domain record); most endpoints are CDN-fronted and disclose neither.

On-chain activity (base)

0.6
USDC received
6
payments
1
unique wallets

Settlement totals · last payment 7/18/2026