Secure multi-party computation runs a transformer without any party seeing your prompt — at minutes per query and gigabytes per token. BumbleBee's BERT-base: 6.4 GB, 2.55 min; LLaMA-7B: ~8 min/token. The bytes don't go where you'd think, and it's why 'blind' networks fall back to TEEs.
An LLM agent that writes its own working smart-contract exploit isn't hypothetical: A1 hits 63% on real exploited contracts and once pulled $8.59M from a single bug. The economics are the story — at a few dollars a scan, attackers profit at a tenth the contract value defenders need.
A DeFi liquidation mints a fixed prize, and for years it went to whoever won the gas war, not the protocol. Aave's own data shows Chainlink SVR routing $675M of liquidations and clawing ~$16M back. Inside the recapture-auction mechanics — SVR, Oval, API3 — and what they don't fix.
A decentralized GPU network has to answer two questions an AWS invoice never raises: is this the GPU it claims, and did it actually do the work? io.net logged 327,000 registered GPUs and roughly 6,720 daily-verified. We dissect metadata trust, PoW puzzles, performance fingerprinting, and zkGPU-ID.
Virtuals' Agent Commerce Protocol sells an independent evaluator as the thing that makes agents trust each other's work. We read 62,882 jobs off Base — and in a 30-job sample, every one let the buyer grade itself. Not one used a third party.
Most decentralized-AI networks vote or average. Allora bets the network should learn whom to trust per context — using forecasters that predict who's about to be wrong, mapped to weights through a softplus gradient. We dissect the mechanism, the math, and where it pays.
An autonomous agent that swaps in the open broadcasts its intent to every searcher in the mempool. We solve the optimal sandwich on a live Base pool, show why an agent's slippage default is the searcher's profit knob, and price the defenses.
A landmark 2025 result: ~250 poisoned documents backdoor an LLM whether it has 600M or 13B parameters — 0.00016% of the tokens. DataDAOs sell 'verifiable' training data, but on-chain provenance proves integrity, not purity. Here's the gap, and what actually narrows it.
Permissionless training networks pay peers for gradients they can't re-run. Proof-of-Learning was meant to verify the work — until it was forged for 3% of the training cost, then for one floating-point op per weight. Here's the mechanism, the attacks, and what's deployed instead.
DX Terminal Pro ran 3,505 LLM agents trading real ETH on Base for 21 days: 7.5M invocations, ~$20M volume, 99.9% settlement. The reliability came from the operating layer around the model, not the weights — here are the numbers and the failure modes.
Every on-chain scheme that verifies an LLM by re-executing it and comparing digests assumes a forward pass is bit-for-bit reproducible. It isn't — Thinking Machines got 80 different answers to one prompt at temperature 0. Here's why, and what determinism costs.
Majority voting over LLMs throws away the one node that got it right. Fortytwo's swarm inference ranks answers pairwise instead — +17 points on GPQA Diamond — with on-chain reputation and proof-of-capability for Sybil defense. The mechanism, the math, the tradeoffs.