Lab

Attack lab

Throw hostile invoices, and a stolen agent key, at the rules. Each attempt shows the layer that stopped it.

Simulated

ALLOW_REDTEAM_BYPASS · Anvil only

Stolen-key mode

Skip the policy layer and send the attempt straight to the contract, as a thief holding the agent key would.

Each one loads into the form below.

Untrusted input

Target vendor ID

Invoice number

Claimed amount (USDC)

Purchase order

Four facts

Pick an attack above, or fill in your own invoice and run it.