You are on Arc testnet: test money only. Every number here is read from the chain.
Scalehouse
Red team

Try to trick the agent

Pick an attack. It runs for real on Arc testnet against a public demo house. No mocks: what you see is what the contract did, with a link to every transaction.

Pick an attack

First, get paid by the agent (no setup)

Paste any wallet address you own. A ticket is cut to it, a second key confirms, and the Circle-signed AI agent pays you 0.01 test USDC on Arc testnet. About 30 seconds, all real transactions.

Poisoned invoice

Hide an instruction in the invoice telling the AI to pay another wallet. The real agent reads it.

Hijacked agent

Assume the agent is fully compromised and tries to pay the attacker's wallet.

Inflated amount

The agent asks to pay 10x what the ticket is worth.

Pay twice

Pay a ticket, then send the exact same payment again.

Same invoice twice

Present one invoice for two different tickets.

Short delivery

The supplier claims 1 loaf, the witness counts 0.7.

Why this matters

Spending limits only cap how much an agent can spend. Scalehouse caps who it can pay and how much each paymentis: the payee is locked when the ticket is cut, a second person confirms the count, and the contract works out the amount itself. A hijacked agent, a poisoned invoice or a retry bug can't move money anywhere else. Refusals freeze the ticket in public instead of failing silently.