AntFleet

Disagreement · 8dbec532-anthropic-5

Workflow: Selling an NFT documents a non-existent two-POST flow

solo Opus
repo a16d2030·PR #2·reviewed 1 week ago

Opus finding

Workflow: Selling an NFT documents a non-existent two-POST flow

mediumdocs-gaphigh
  • opensea/opensea-marketplace/references/marketplace-api.md:327-332
Step 1 says 'POST to build', step 3 says 'POST again with signature'. The endpoint does not support a build/preview round-trip — listings are constructed client-side (counter, salt, zone, EIP-712 hash) and POSTed once. The Making an Offer workflow has the same defect. Agents executing this workflow would either double-post (creating a duplicate listing or a 400) or wait for a build response that doesn't exist.

Recommendation

Replace the workflow with: (1) Construct OrderComponents client-side (fetch counter from Seaport, pick salt/zone), (2) Sign EIP-712, (3) POST { protocol_address, parameters, signature } once, (4) Monitor.

Other reviewer

The other reviewer flagged nothing in this file/line range.

Why this didn't post

This finding didn't meet AntFleet's unanimous agreement threshold. Both frontier models review every PR independently; only findings they both flag with the same severity and category are posted to the PR. This one fell through.

read the methodology →