{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:BN226CIXBIKTD4WMPGHIG7NQZQ","short_pith_number":"pith:BN226CIX","canonical_record":{"source":{"id":"2503.16248","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-20T15:44:31Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7f2de8e87b97d129fe0ae7c230f6b64e5ed9d0fc35a3408029ede46fcc499201","abstract_canon_sha256":"6656c604ad6f867639e675c94a719ea82460f75ac1dc3c37ece9f8c33507585e"},"schema_version":"1.0"},"canonical_sha256":"0b75af09170a1531f2cc798e837db0cc337b854d4aa2657f237542404fb5af0e","source":{"kind":"arxiv","id":"2503.16248","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.16248","created_at":"2026-07-05T11:34:06Z"},{"alias_kind":"arxiv_version","alias_value":"2503.16248v3","created_at":"2026-07-05T11:34:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.16248","created_at":"2026-07-05T11:34:06Z"},{"alias_kind":"pith_short_12","alias_value":"BN226CIXBIKT","created_at":"2026-07-05T11:34:06Z"},{"alias_kind":"pith_short_16","alias_value":"BN226CIXBIKTD4WM","created_at":"2026-07-05T11:34:06Z"},{"alias_kind":"pith_short_8","alias_value":"BN226CIX","created_at":"2026-07-05T11:34:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:BN226CIXBIKTD4WMPGHIG7NQZQ","target":"record","payload":{"canonical_record":{"source":{"id":"2503.16248","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-20T15:44:31Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7f2de8e87b97d129fe0ae7c230f6b64e5ed9d0fc35a3408029ede46fcc499201","abstract_canon_sha256":"6656c604ad6f867639e675c94a719ea82460f75ac1dc3c37ece9f8c33507585e"},"schema_version":"1.0"},"canonical_sha256":"0b75af09170a1531f2cc798e837db0cc337b854d4aa2657f237542404fb5af0e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:34:06.099823Z","signature_b64":"Vj4KBcU8BSx3Lh4SWIVPLAWPbWNHpF+WMLvHLlICHQNl5zXl1ttSafUntPEZmiwpfpfxdulv355RC7dpJE5rAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0b75af09170a1531f2cc798e837db0cc337b854d4aa2657f237542404fb5af0e","last_reissued_at":"2026-07-05T11:34:06.099331Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:34:06.099331Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2503.16248","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:34:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JhO6hMHfiJmUAyxH+SUM1FatglT9Yc5X3YKKxkCd2wI/z7MLPQnRvcchkiQPDbIM79liS7Hhxs3uZBiTlAOCAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T07:42:11.437229Z"},"content_sha256":"1b5bc85041c5d2ac578a9e372d838aeba98c1f6854789c2134e9863fb9bd4451","schema_version":"1.0","event_id":"sha256:1b5bc85041c5d2ac578a9e372d838aeba98c1f6854789c2134e9863fb9bd4451"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:BN226CIXBIKTD4WMPGHIG7NQZQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Real AI Agents with Fake Memories: Fatal Context Manipulation Attacks on Web3 Agents","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Atharv Singh Patlan, Peiyao Sheng, Pramod Viswanath, Prateek Mittal, S. Ashwin Hebbar","submitted_at":"2025-03-20T15:44:31Z","abstract_excerpt":"AI agents integrated with Web3 offer autonomy and openness but raise security concerns as they interact with financial protocols and immutable smart contracts. This paper investigates the vulnerabilities of AI agents within blockchain-based financial ecosystems when exposed to adversarial threats in real-world scenarios. We introduce the concept of context manipulation -- a comprehensive attack vector that exploits unprotected context surfaces, including input channels, memory modules, and external data feeds. It expands on traditional prompt injection and reveals a more stealthy and persisten"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.16248","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2503.16248/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:34:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Vt/ou62AhNOW7Vo3hT2VNWiM/rq+10sO1vVKtNYNqL2CEvAjSS3FUM3GQLwOS6XW8yCusmpjJLOz6Y8SBWTgCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T07:42:11.437811Z"},"content_sha256":"eaa30f6dd887da76d533128e548900323799c5cedb13a59a406a2ccea1c81d96","schema_version":"1.0","event_id":"sha256:eaa30f6dd887da76d533128e548900323799c5cedb13a59a406a2ccea1c81d96"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BN226CIXBIKTD4WMPGHIG7NQZQ/bundle.json","state_url":"https://pith.science/pith/BN226CIXBIKTD4WMPGHIG7NQZQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BN226CIXBIKTD4WMPGHIG7NQZQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T07:42:11Z","links":{"resolver":"https://pith.science/pith/BN226CIXBIKTD4WMPGHIG7NQZQ","bundle":"https://pith.science/pith/BN226CIXBIKTD4WMPGHIG7NQZQ/bundle.json","state":"https://pith.science/pith/BN226CIXBIKTD4WMPGHIG7NQZQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BN226CIXBIKTD4WMPGHIG7NQZQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:BN226CIXBIKTD4WMPGHIG7NQZQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6656c604ad6f867639e675c94a719ea82460f75ac1dc3c37ece9f8c33507585e","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-20T15:44:31Z","title_canon_sha256":"7f2de8e87b97d129fe0ae7c230f6b64e5ed9d0fc35a3408029ede46fcc499201"},"schema_version":"1.0","source":{"id":"2503.16248","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.16248","created_at":"2026-07-05T11:34:06Z"},{"alias_kind":"arxiv_version","alias_value":"2503.16248v3","created_at":"2026-07-05T11:34:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.16248","created_at":"2026-07-05T11:34:06Z"},{"alias_kind":"pith_short_12","alias_value":"BN226CIXBIKT","created_at":"2026-07-05T11:34:06Z"},{"alias_kind":"pith_short_16","alias_value":"BN226CIXBIKTD4WM","created_at":"2026-07-05T11:34:06Z"},{"alias_kind":"pith_short_8","alias_value":"BN226CIX","created_at":"2026-07-05T11:34:06Z"}],"graph_snapshots":[{"event_id":"sha256:eaa30f6dd887da76d533128e548900323799c5cedb13a59a406a2ccea1c81d96","target":"graph","created_at":"2026-07-05T11:34:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2503.16248/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"AI agents integrated with Web3 offer autonomy and openness but raise security concerns as they interact with financial protocols and immutable smart contracts. This paper investigates the vulnerabilities of AI agents within blockchain-based financial ecosystems when exposed to adversarial threats in real-world scenarios. We introduce the concept of context manipulation -- a comprehensive attack vector that exploits unprotected context surfaces, including input channels, memory modules, and external data feeds. It expands on traditional prompt injection and reveals a more stealthy and persisten","authors_text":"Atharv Singh Patlan, Peiyao Sheng, Pramod Viswanath, Prateek Mittal, S. Ashwin Hebbar","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-20T15:44:31Z","title":"Real AI Agents with Fake Memories: Fatal Context Manipulation Attacks on Web3 Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.16248","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1b5bc85041c5d2ac578a9e372d838aeba98c1f6854789c2134e9863fb9bd4451","target":"record","created_at":"2026-07-05T11:34:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6656c604ad6f867639e675c94a719ea82460f75ac1dc3c37ece9f8c33507585e","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-20T15:44:31Z","title_canon_sha256":"7f2de8e87b97d129fe0ae7c230f6b64e5ed9d0fc35a3408029ede46fcc499201"},"schema_version":"1.0","source":{"id":"2503.16248","kind":"arxiv","version":3}},"canonical_sha256":"0b75af09170a1531f2cc798e837db0cc337b854d4aa2657f237542404fb5af0e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0b75af09170a1531f2cc798e837db0cc337b854d4aa2657f237542404fb5af0e","first_computed_at":"2026-07-05T11:34:06.099331Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:34:06.099331Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Vj4KBcU8BSx3Lh4SWIVPLAWPbWNHpF+WMLvHLlICHQNl5zXl1ttSafUntPEZmiwpfpfxdulv355RC7dpJE5rAw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:34:06.099823Z","signed_message":"canonical_sha256_bytes"},"source_id":"2503.16248","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1b5bc85041c5d2ac578a9e372d838aeba98c1f6854789c2134e9863fb9bd4451","sha256:eaa30f6dd887da76d533128e548900323799c5cedb13a59a406a2ccea1c81d96"],"state_sha256":"c128104e3b118ee1a4d2962672ebd0bad6fe328c67c1739a8757f5981e08a843"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"65zVADODgDZSQl6VwxU8CMk+p8C0F7gG3IkCR4YkowVaREqVByjh+iJL0uYkYlEoFTOuK5/LC5Ez8FZIUU5ABA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T07:42:11.442968Z","bundle_sha256":"acd36de0d1a27539ba73ce3d696a50bcafee7e08a407fea59c6564a495279311"}}