Public API

Free, read-only, no auth required. JSON only. Rate-limited to 100 requests per hour per IP.

Base URL · https://web3radar.stakecito.com/api/v1

OpenAPI spec · /api/v1/openapi.json

Rate limit · 100 requests/hour. X-RateLimit-* headers on every response.

CORS · all origins allowed on GET.

Status · only PUBLISHED incidents returned.

Endpoints

GET/api/v1/incidents

List incidents, filterable and paginated. 50 max per page.

curl -s "https://web3radar.stakecito.com/api/v1/incidents?chain=ethereum&chain=solana&since=2024-01-01&pageSize=50"

GET/api/v1/incidents/{slug}

Single incident detail.

curl -s "https://web3radar.stakecito.com/api/v1/incidents/wormhole-2022-02-02-abc123"

GET/api/v1/incidents/recent?since=ISO_DATE
Incidents updated since the given date — for syncing.
```
curl -s "https://web3radar.stakecito.com/api/v1/incidents/recent?since=2025-01-01T00:00:00Z"
```

GET/api/v1/chains

All monitored chains with counts.

curl -s "https://web3radar.stakecito.com/api/v1/chains"

GET/api/v1/attack-vectors

Attack vector taxonomy.

curl -s "https://web3radar.stakecito.com/api/v1/attack-vectors"

GET/api/v1/stats
Aggregate statistics (all-time, 365d, 30d, 7d).
```
curl -s "https://web3radar.stakecito.com/api/v1/stats"
```

Errors

All errors return a structured JSON envelope:

{
  "error": {
    "code": "rate_limited",
    "message": "You have exceeded the public API rate limit."
  }
}

Versioning & deprecation

The current version is v1. Breaking changes ship under a new v{n+1} prefix; the previous version remains available for at least 6 months after the announcement, with a Deprecation header in responses. Non-breaking additions land in v1 without notice.