Archive
22 articles published in this period.
Ethereum's 12-second slot clock creates a hard lower bound on AI agent state freshness. Here's what that means for liquidators, arbitrageurs, and yield rebalancers — and how to engineer around it.
An on-chain agent's transactions prove what happened, not why. Three 2026 papers on trajectory anomaly detection show how to close that gap — and how the optimistic bisection game from rollups makes it slashable.
An AI agent holding a raw ECDSA key is one model compromise from total loss. FROST's two-round DKG means the full private key never exists anywhere — not during setup, not during signing. Here's the mechanism, the Ethereum gap, and how Lit Protocol PKPs deploy it today.
CoW Protocol's batch auction design makes front-running structurally impossible — and that matters enormously for AI agents executing DeFi strategies at machine speed.
Deposit ETH in Aave, borrow USDC, buy more ETH, repeat. Three loops creates 2.97× leverage from a single ETH — and all three positions share one liquidation trigger at −3% ETH price. The math, the cascade, and why AI yield optimizers find themselves here by default.
FRI-STARKs are fast and trustless, but their proofs are megabytes wide. Groth16 is 256 bytes but needs a ceremony. STARK→SNARK wrapping resolves the tension — and it's why SP1 and RISC Zero can settle any ML inference on L1 for under 300k gas.
Chainlink's push oracle only updates when price moves ≥0.5% or an hour passes. That gap costs AI agents real money — and Pyth's pull model closes most of it.
ERC-4337 lets AI agents transact without holding ETH — but the alt-mempool has its own fee market, bundler economics, and MEV surface every builder must understand.
Controlling one intermediate pipeline stage is enough to inject a backdoor into a decentralized post-training run — 94% ASR, no data access required. The mechanism, why training loss stays clean, and what it means for networks fine-tuning LLMs across untrusted nodes.
Federated learning keeps raw data local — but the gradients it publishes on-chain are not private. Inversion attacks reconstruct training images from them, and a public ledger makes that window permanent.
When a perp DEX's insurance fund runs dry, ADL force-closes winning positions first — ranked by profit %. Chitra 2026 proves no mechanism can be solvent, fair, and revenue-neutral. Hyperliquid Oct 10 2025: $2.1B closed, $653M via ADL, $45–51.7M haircut in 12 min.
ElizaOS agents treat their memory store as ground truth — their own past. CrAIBench tests 685 attack cases across 33 Web3 action types and finds memory injection hits 55.1% ASR even on Claude Sonnet 3.7, while every off-the-shelf detector fails.