Replay after success (no binding)
Quirk · GET /api/x402/replay-after-success · Replay / Idempotency / Race
Once a payment settles, the same payload re-serves the resource forever with no re-settle.
Explanation
After one payment settles, the same payload re-serves the resource indefinitely with no re-settlement, because the server never binds a payment to a single use. The merchant must bind and consume payments to prevent replay. This is a server-side replay flaw — distinct from, but compounded by, a CDN that caches the paid response and replays it (including via conditional 304s) without payment (see the Edge / CDN Controls category).
What to watch
Pay once, fetch many — call it twice with the same wallet.
Facilitator
Settled against the live Radius testnet facilitator (https://facilitator.testnet.radiustech.xyz). A valid payment runs a real /verify and /settle on-chain.
Metadata
- Status: Quirk
- Method: GET
- Price: 0.0001 (100 atomic)
- Responsible party: Merchant