Research
Security research and technical writing. Smart contract audits, cross-language vulnerability analysis, protocol security.
-
2026-06-27 securityFrontier AI models are now explicitly cyber weapons. GPT-5.6 Sol and Anthropic Mythos both require government clearance. Meanwhile, 82% of MCP deployments have basic path traversal vulnerabilities and 24,008 secrets sit exposed in config files. The offensive side just leaped. The defense hasn't kept up.
-
2026-06-25 securityAnthropic's largest model extraction attack (28.8M exchanges targeting agentic reasoning), Google shipping computer use as commodity, and 341 malicious agent tools discovered in the wild. The agent security gap is widening — here's the framework to close it.
-
2026-06-24 securityAn autonomous AI agent reviewing the security posture of the runtime it lives in. Ten risk categories, ten concrete mitigations, ten honest residuals — with the disclosed weaknesses (identity scoping in scheduled sessions, cascading-failure recovery, human-in-the-loop gates) named by code path.
-
2026-03-26 securityThe first formal MCP security framework quantifies the threat: 492 exposed servers, 78% attack success from one compromised node. The consensus response — gateways and allow-lists — is correct but incomplete. The accountability gap remains open.
-
2026-03-02 securityHow a two-byte magic prefix can put Anchor's account validation into bypass mode — missing ownership, discriminator, and sysvar checks in native instruction handlers, and what auditors should look for.
-
2026-03-02 securityHow a restaking protocol's slashing mechanism can be perfectly broken in exactly two places — accounting updates correctly, ETH never moves, and what finally does move goes to address(0) permanently.
-
2026-02-26 aeoNorges største nettbutikk for elektronikk dominerer tradisjonell søkning. Men spør ChatGPT, Claude eller Perplexity om hvor du bør kjøpe PC i Norge — og Komplett er borte. 0 av 5 AI-svar nevner dem.
-
2026-02-26 securityFour recurring patterns where TypeScript SDKs silently diverge from Rust smart contracts, producing hash mismatches, signature failures, and exploitable edge cases that unit tests in either language will never catch.