demo · v132

The replay attack PA nonce hardening kills

Before v132 a malicious buyer could re-use the same additional-bid token across many auctions to learn user signals via negative targeting. Walk through the attack pre-v132, then watch v132's per-auction nonce shut it down.