{
  "projectId": "bankr",
  "title": "Bankr｜入金状态与 AI 服务入口",
  "summary": "当前发布前端把报价、入金意图及到账状态分开，并展示 LLM gateway 与 x402 接入；前端状态不能代替真实资产结算。",
  "scope": "实际公开网页发布的选定业务 JavaScript 包；REA 解析 1 个 JS 文件，静态分析。",
  "status": "partial",
  "analyzedAt": "2026-10-13T10:45:43.693309+00:00",
  "tool": {
    "name": "REA",
    "version": "6.4.0"
  },
  "findings": [
    {
      "title": "入金意图创建后另行查询状态",
      "detail": "代码先请求 Coinbase 报价，再向 api.bankr.bot/deposit-intent 提交意图并保存 depositId；界面读取 latest 和具体意图状态，区分 pending 与 landed。这体现的是客户端入金状态处理，未实际入金验证。",
      "evidenceType": "observed",
      "evidenceIds": [
        "ev_4d4b7b4f6c26dd0ea30fcaf3d0a3899e001c56bf063c323f6e0302404fd4c07d"
      ],
      "sourceUrls": [
        "https://bankr.bot/assets/index-D-3LQoUd.js"
      ]
    },
    {
      "title": "LLM 和 x402 有独立接入入口",
      "detail": "发布包中存在 llm.bankr.bot 的网关界面与 x402.bankr.bot/{slug} 的服务入口，以及独立 Agent profile 查询。可推断产品包含多个服务模块，不能由这些 URL 证明自动交易、模型效果或收入规模。",
      "evidenceType": "code_inference",
      "evidenceIds": [
        "ev_4d4b7b4f6c26dd0ea30fcaf3d0a3899e001c56bf063c323f6e0302404fd4c07d"
      ],
      "sourceUrls": [
        "https://bankr.bot/assets/index-D-3LQoUd.js"
      ]
    }
  ],
  "limitations": [
    "只静态分析单一生产前端包，没有取得钱包托管、结算、LLM 计费或交易后端代码。",
    "界面中的服务计费和支持模型属于产品配置，未通过付费调用验证。",
    "静态代码不证明运行行为、完整风控、成交或收益；未审计服务端。",
    "没有登录、读取账户、连接钱包、签名、交易或执行目标代码。"
  ],
  "artifacts": [
    {
      "label": "index-D-3LQoUd.js",
      "url": "https://bankr.bot/assets/index-D-3LQoUd.js",
      "sha256": "4da448ab277c406d76ab93c13ea31632570d0d663b269731a936db1a2707882a"
    }
  ],
  "evidenceIds": [
    "ev_4d4b7b4f6c26dd0ea30fcaf3d0a3899e001c56bf063c323f6e0302404fd4c07d"
  ],
  "reportUrl": "/research/rea/bankr.json",
  "coverage": {
    "parsedFiles": 1,
    "parseFailures": 0,
    "semanticCoverage": "partial",
    "rootArtifactSha256": "3f09b7990c1b5534487d5e146805ebfa6e002ff04e74edcf9d60c9c637e34924",
    "inputFileCount": 1,
    "inputBytes": 4967584,
    "analysisResult": "completed"
  }
}