Security

What stops someone draining your gas tank. Five limits live in the contracts, three in the relayer, and every refusal is recorded with its reason.

Drain attack

The same script judges can run. It fails, and the tank only moves for real payments.

Replays, dust, arbitrary calldata, 50 fresh accounts, over-cap spam and stale deadlines, sent straight at the relayer.

#	Limit	Enforced in	Stops	Refused
1	Function allowlist wrong_selector, target_refused	Contract	Using the relayer to run arbitrary transactions	1
2	Per-merchant gas tank tank_limit	Contract	One merchant's gas paying for another merchant's traffic	0
3	Daily caps per payer and merchant payer_daily_cap, merchant_daily_sponsorship_cap	Contract	Spam from one payer or one merchant	1
4	Minimum amount, fee covers gas dust, fee_too_low	Contract	Dust payments at the merchant's expense	2
5	Signature, nonce and deadline invalid_signature, replay, deadline	Contract	Replays and stale intents	3
6	Simulate before broadcast simulation_refused	Relayer	Paying gas for transactions that would fail	0
7	Gas caps per call gas_limit, gas_price	Relayer	Gas price spikes and gas-heavy calls	0
8	Hot wallet float and circuit breaker circuit_open, circuit_budget	Relayer	A bug or leaked key emptying the float	0

Time	Source	Reason	From
Nov 3, 9:04 PM UTC	Relayerlayer 5	Replay This signed request was already used.	0xec52…7671
Nov 2, 12:04 PM UTC	Relayerlayer 5	Deadline The signed request had expired.	0x1268…f4ea
Oct 31, 6:04 AM UTC	Relayerlayer 4	Fee too low The payment fee would not cover the gas, so it was not sponsored.	0x9bd5…61f9
Oct 28, 5:04 PM UTC	Relayerlayer 3	Payer daily cap This payer reached the daily limit for sponsored actions.	0xb68f…e693
Oct 27, 12:04 PM UTC	Relayerlayer 1	Wrong selector The call targeted a function outside the allowlist.	0xf33e…4d7d
Oct 24, 8:04 PM UTC	Relayerlayer 4	Dust The amount is below the minimum the merchant sponsors.	0x229d…6c47
Oct 22, 9:04 PM UTC	Relayerlayer 5	Replay This signed request was already used.	0xd28d…5ee1