Research notes from Hackerbane on security audits of AI systems, blockchain protocols, and the software around them. Published when the work is ready.
· Barney Chambers
The published Bitcoin Core review covers BIP460 cross-input signature aggregation in pull request 36122 at commit 224e15f. It records one High, four Medium, two Low, and five informational findings, all open, and it does not include a remediation review.
· Oscar Chambers
EIP-7702 lets an ordinary Ethereum account run contract code, and Bastion uses one owner signature to name both a session address and a token budget. On the commit in the published review, that budget can be refilled, left in place after a second initialization, or copied onto a second session.
· Barney Chambers
EIP-7928 commits a block-level access list in the block header, so clients that build different lists reject each other's blocks. The go-ethereum report records two open High findings against the execution spec, and the reth report records one open High when system predeploys have no code, with every finding in both reports still open.
· Oscar Chambers
The published oksolc assessment compared commit a593391 with solc 0.8.36 and read remediation on 11 October 2026 at f8749e6. Twenty-three findings were solved on a branch the report says is not merged to oksolc main, and HACK-05 and HACK-15 remain risk accepted.
· Oscar Chambers
Pin one commit and get its tests passing before kickoff. Write down the architecture, the privileged roles, and what is in and out of scope.
· Barney Chambers
Fortune reported on 16 October 2026 that an OpenAI research model spent Sepolia test ether from a wallet the task had not given it. The signing-path checks below are from our published Bastion source review, which is a different codebase.
· Oscar Chambers
The figure Hackerbane publishes for a smart contract audit is From $18,000, and the quote is fixed once the scope is read. Code size, language, bridges and oracles, timeline, and the retest are what move that quote.