Archive
136 articles, grouped by date.
ElizaOS agents treat their memory store as ground truth — their own past. CrAIBench tests 685 attack cases across 33 Web3 action types and finds memory injection hits 55.1% ASR even on Claude Sonnet 3.7, while every off-the-shelf detector fails.
On OP Stack chains, 'confirmed' is a four-layer promise stretching from 2 seconds to 7 days. AI agents that collapse these into one boolean expose themselves to sequencer reorgs, bridge lockups, and state dispute windows. Here's the full settlement stack, and an action taxonomy for each rung.
ERC-7683 gives users cross-chain swaps in 8 seconds by converting bridge latency into a solver capital float problem. The 4–7 bps spread is a rental rate on cross-chain inventory — here's the lifecycle, the capital math, and what AI agents pay to move capital across chains.
When a perp DEX's insurance fund runs dry, ADL force-closes winning positions first — ranked by profit %. Chitra 2026 proves no mechanism can be solvent, fair, and revenue-neutral. Hyperliquid Oct 10 2025: $2.1B closed, $653M via ADL, $45–51.7M haircut in 12 min.
Most 'on-chain AI' keeps the model off-chain and posts a proof. But you can also just run the forward pass in Solidity. We do the gas math — ~106k gas per weight, an MNIST net that needs 180 Ethereum blocks — and find the thin band of models that fit.
Polymarket's off-chain matching + on-chain settlement creates a ~10-second consistency gap. GHOSTHUNTER found 980K targeted reversions and $1.49M extracted — here's the exact mechanism.
Federated learning keeps raw data local — but the gradients it publishes on-chain are not private. Inversion attacks reconstruct training images from them, and a public ledger makes that window permanent.
Controlling one intermediate pipeline stage is enough to inject a backdoor into a decentralized post-training run — 94% ASR, no data access required. The mechanism, why training loss stays clean, and what it means for networks fine-tuning LLMs across untrusted nodes.
AI agents need real-world data. zkTLS closes the oracle gap: TLSNotary's MPC-TLS costs 30 MB of garbled circuits at 5 Mbps; its April 2026 Proxy mode cuts that to 4 seconds. Here is the trust model, the benchmarks, and what agents can prove today.
Inference markets charge a flat price per query. A cascade arbitrageur routes easy tasks to a cheap model and escalates only failures — capturing the spread. Olmedo, Schölkopf & Hardt (2026) show 40% net margins with no model-dev risk.
A DeFi liquidation mints a fixed prize, and for years it went to whoever won the gas war, not the protocol. Aave's own data shows Chainlink SVR routing $675M of liquidations and clawing ~$16M back. Inside the recapture-auction mechanics — SVR, Oval, API3 — and what they don't fix.
VitaDAO mints a Molecule IP-NFT — an ERC-721 pointing to a legal research agreement on IPFS — then fractionalizes it into ERC-20 tokens for community funding. Now AutoScientists runs the experiments at machine speed. Here is what the chain actually proves, and what it doesn't.