Research
Everything we publish lives here: security research, technical writeups, and lessons from audit work across blockchain and AI systems. Published client reports live under Audit reports.
- 2026-08-28AIWhen a tool return looks like an instruction
Tool output is data from somewhere you do not control. If you splice it into the instruction stream, it starts looking like a command.
- 2026-08-09blockchain + AI, blockchainA learned pass that drops a range check
A model inside a compiler or prover can drop a range check and still produce a proof that verifies. The property is gone.
- 2026-07-18blockchain + AIAn agent that can sign is a principal
If an agent can call sign, it is a principal the brief has to name. The contract still thinks it is talking to a key.