An exit that refuses to run at the wrong price
A close that only executes if the price is inside a window you signed. Outside it, the transaction reverts rather than selling your position into a spike.
ReadSecurity
7 posts
A Safe lost $7.8 million to its own module
A Gnosis Safe lost 7.8 million dollars in restaked ETH because an enabled module let a passing keeper point it at an attacker's own pool. The Safe itself worked. This kind of bug is old, and it comes down to who gets to choose the target.
ReadA signature says who, not what
A signed transaction feels final, but a signature only proves who approved something valid. It does not prove that what executes is what they approved. DeFiLoops fills that gap with a content receipt and a simulation that judges what a transaction actually does.
ReadAn agent was talked into sending $150,000 in Morse code
No exploit and no stolen key, just a message the model agreed to act on. Prompt injection is not a bug you patch, so what can a persuaded model express?
ReadHow to revoke the agent in one transaction
Revocation is the feature you hope never to use and should test on day one. How it works, why the agent's permission is one-way, and what stop means.
ReadWhy an AI agent should never hold a private key
A key grants unlimited authority, and every limit on top is software. A permission can be withdrawn, but a copied key cannot be un-copied.
ReadAgentic wallet security: what actually goes wrong
The failure modes with evidence behind them, separated from the ones that only have a statistic. One widely quoted figure does not survive.
Read