The Elliptic benchmark made GNNs the default for on-chain AML. A 2026 leakage-free re-evaluation flips the script: random forests win by 13 F1 points, randomly rewired edges beat the real graph, and every model falls off a cliff at time step 43.
World Chain reserved top-of-block space for verified humans while 382M smart-account ops poured in. We read the Semaphore tree on Ethereum — 17.59M identities, hourly batches at ~3,300 gas each — decode PBH's month-stamped nullifiers, and find the human-only lane sitting almost empty.
An agent holding your raw key is one prompt injection from total loss — and 97% of early EIP-7702 delegations went to drainer sweepers. We read the sweeper's source off the chain, dissect a real 35.97-USDC-a-day spend permission on Base, and do the blast-radius math.
Story raised $140M to make IP programmable for the AI era. We read its chain: 6.46M registered IP assets, 230,300 licenses ever minted, one week of royalties totaling $10 — plus the LAP/LRP royalty math and the precompile at 0x0101 that computes the graph.
Yesterday an AI agent deployed a prediction market on Gnosis; other agents will price it, bet on it, and resolve it. The calibration data behind LLM forecasters, the FPMM math they trade against, and what breaks when the marginal bettor is a model.
zkML, optimistic, TEE, FHE all prove the computation. Restaking takes the other road: bond it and slash liars. We do the cost-of-corruption math behind EigenLayer's $18B AI-AVS security, the overloading attack that breaks it, and the probabilistic-audit tax.
An AI agent that acts on your bank balance has to prove it saw that balance — without a trusted API. zkTLS turns any HTTPS session into a portable proof. We dissect MPC-TLS vs proxy vs TEE, the real TLSNotary benchmarks, and read Reclaim's on-chain verifier on Base down to its single attestor.
Most 'on-chain AI' keeps the model off-chain and posts a proof. But you can also just run the forward pass in Solidity. We do the gas math — ~106k gas per weight, an MNIST net that needs 180 Ethereum blocks — and find the thin band of models that fit.
Majority voting over LLMs throws away the one node that got it right. Fortytwo's swarm inference ranks answers pairwise instead — +17 points on GPQA Diamond — with on-chain reputation and proof-of-capability for Sybil defense. The mechanism, the math, the tradeoffs.
An agent doesn't need its key stolen to drain a wallet — it can be talked into signing. CrAIBench shows memory injection beating prompt injection 55% to ~0% on the strongest model, and only fine-tuning closes the gap.
Every on-chain scheme that verifies an LLM by re-executing it and comparing digests assumes a forward pass is bit-for-bit reproducible. It isn't — Thinking Machines got 80 different answers to one prompt at temperature 0. Here's why, and what determinism costs.
DX Terminal Pro ran 3,505 LLM agents trading real ETH on Base for 21 days: 7.5M invocations, ~$20M volume, 99.9% settlement. The reliability came from the operating layer around the model, not the weights — here are the numbers and the failure modes.