Wasit: what we found
x402 SVM settlement check fails for settlements sent as version 1 transactions.
Public since 2026-10-30. GitHub issue wasit-dev/Wasit/issues/22 was posted.
Code: wasit-dev/Wasit, their default branch on 2026-10-30. Reported to them: wasit-dev/Wasit/issues/22.
Status: Open: no fix merged yet
Findings
breaks money
x402 SVM settlement check fails for settlements sent as version 1 transactions
packages/core/src/x402/chains/svm.ts (line 255) reads the settlement with rpc.getTransaction(sig, { encoding: 'jsonParsed', maxSupportedTransactionVersion: 0 }). For a version 1 settlement the RPC answers error -32015, so a compliant settlement is reported as failing the check (the second call in the file has the same cap).
Version 1 transactions are a large share of mainnet now (about 40% of non-vote transactions in a block I sampled; 115 of 332 in another), so this depends only on which wallet or SDK built the transaction.
packages/core/src/x402/chains/svm.ts:255
getTransaction(<v1 signature>, { maxSupportedTransactionVersion: 0 }) -> error -32015 "Transaction version (1) is not supported by the requesting client"
getTransaction(<v1 signature>, { maxSupportedTransactionVersion: 1 }) -> the transaction (version 1, meta present)Fix: maxSupportedTransactionVersion: 1.
What we measured
| What | Result | How | Checked |
|---|---|---|---|
| Reported to them | wasit-dev/Wasit/issues/22, posted 2026-10-30 | https://github.com/wasit-dev/Wasit/issues/22 | Oct 30, 2026, 3:02 PM UTC |
| Status | Open: no fix merged yet | GitHub issue wasit-dev/Wasit#22 | Oct 31, 2026, 1:55 AM UTC |
Tools run on this project
Check it yourself
Every Pulse tool, live on mainnet, starting with tx_version. Paste any signature from this report, or your own.
Toolbox
Pick any tool, change any input, run it on mainnet, and reopen any call to change it and run it again.
Ctrl ↵ runs the tool
Run when code can't find or read a transaction that is on chain, or before relying on code that reads other people's transactions. Read the docs
Response
Run the request to see the live response. The inputs are real mainnet data, so it works as it is.
Your calls 0
Calls you run appear here and stay in this browser. Open one to change its inputs and run it again.