Archive
135 articles published in this period.
An MCP tool's description is trusted context the user never sees. Hide an instruction there and a wallet-signing agent will route your USDC to an attacker. MCPTox: the best-aligned model still refused under 3% of these attacks — so the defense can't live in the model.
DeepSeek-R1 emits 8,400 thinking tokens before a 341-token answer on hard math. Every existing on-chain verification scheme — TEE, optimistic, ZK, sampling — was designed when computation and output were proportional. They aren't anymore.
Skill marketplaces let any agent buy trading capabilities off a shelf — and every skill is an execution vector. SAE's non-bypassable execution guards cut max drawdown from 46.4% to 3.2% (↓93%), CVaR by 97.5%, and the Delegation Gap by 97% on live perp data. The defense isn't in the model.
Ethereum mainnet gas averaged 0.16 Gwei in June 2026 — a 3,000× drop from DeFi summer 2021. That collapse doesn't just cut costs; it invalidates five years of AI agent design assumptions and opens architectures that were economically impossible until now.
An on-chain agent's transactions prove what happened, not why. Three 2026 papers on trajectory anomaly detection show how to close that gap — and how the optimistic bisection game from rollups makes it slashable.
Shared-state multi-agent LLMs exhibit three formal anomaly classes — stale-generation, phantom-tool, causal-cascade. Three 2026 papers prove them unavoidable without isolation primitives and measure the fix: zero corruptions across 884,110 commits under Observable-Read Isolation.
An AI agent holding a raw ECDSA key is one model compromise from total loss. FROST's two-round DKG means the full private key never exists anywhere — not during setup, not during signing. Here's the mechanism, the Ethereum gap, and how Lit Protocol PKPs deploy it today.
Covenant-72B pre-trained a 72.7B-parameter LLM across 70+ anonymous internet peers. The key was SparseLoCo: 1.56% gradient density plus 2-bit quantization achieves 146× compression, collapsing the required uplink from 1.9 Gbps to 110 Mbps — consumer fiber.
CoW Protocol's batch auction design makes front-running structurally impossible — and that matters enormously for AI agents executing DeFi strategies at machine speed.
Intent-based DEXes don't route your trade — they auction it. Solvers compete as autonomous optimizers to settle a batch at one clearing price. Inside CoW Protocol's contract, the optimization problem, and the metaheuristic solvers now winning it.
Softmax costs 275 ZK constraints per element vs 4 for MatMul. ZK-DeepSeek proved Transformer inference is expressible in SNARKs. Lookup arguments (Lasso, LogUp) explain how — replacing in-circuit transcendental approximations with pre-committed tables cuts nonlinear costs 10–20×.
Zero-knowledge proofs can slash a double-signer but not a lying AI oracle. EIGEN's intersubjective fault model closes this gap via social consensus-driven forking — and it's live on EigenAI mainnet.