An exit that refuses to run at the wrong price
A close that only executes if the price is inside a window you signed. Outside it, the transaction reverts rather than selling your position into a spike.
ReadSecurity
7 posts
A signature says who, not what
A signed transaction feels final. But a signature proves who approved something valid — not that the exact thing executing is the thing they approved. Here is what DeFiLoops puts in that gap: a content receipt, and a simulation that judges what a transaction actually does.
ReadA stranger aimed the module
A Gnosis Safe lost 7.8 million dollars in restaked ETH — not because the Safe was broken, but because an enabled module let a passing keeper point it at an attacker's own pool. The class is old. The lesson is where you let a target come from.
ReadAn agent was talked into sending $150,000 in Morse code
No exploit and no stolen key, just a message the model agreed to act on. Prompt injection is not a bug you patch, so what can a persuaded model express?
ReadHow to revoke the agent in one transaction
Revocation is the feature you hope never to use and should test on day one. How it works, why the agent appointment is one-way, and what stop means.
ReadWhy an AI agent should never hold a private key
A key grants unlimited authority, and every limit on top is software. An appointment can be withdrawn; a copied key cannot be un-copied.
ReadAgentic wallet security: what actually goes wrong
The failure modes with evidence behind them, separated from the ones that only have a statistic. One widely quoted figure does not survive.
Read