Any permissionless network that rewards the best gradient contribution faces a Nash equilibrium where every rational miner copies instead of computes — same reward, zero cost. Gauntlet's commit-reveal mechanism closes that trap, and already trained a 1.2B LLM on Bittensor with real token payouts.
A flash loan gives an AI agent $1M with no collateral — and demands it back plus 0.05% before the block ends. The atomic callback constraint is both what makes flash loans safe and what forces an agent to solve its entire strategy before touching the chain.
A scan of ~2,000 MCP servers found zero with authentication. When an AI agent calls a tool, the tool has no idea who authorized it, with what scope, or whether a human was ever involved. IBCT tokens and the HDP IETF draft add an unforgeable answer — in 0.049 ms Rust verification.
On-chain data markets promise to pay you for your data's value AND protect your privacy. Differential privacy is the only rigorous knob for the second — and one budget ε can't serve both. The utility collapse, the composition trap, and why no chain can verify the ε you were promised.
Train a model on the web the last models filled with output and quality decays — the tails go first, then the middle. Provenance is sold as the fix, but a chain proves who signed a blob and when, not that it's human or clean. Signed is not clean.
Frontier open models are now Mixture-of-Experts — cheap to serve in a datacenter, nearly impossible across the internet. The all-to-all expert shuffle moves ~9.5 MiB/token and caps decode at ~67 tok/s even on 400G InfiniBand; on internet links it falls to seconds per token.
An on-chain agent reports its work in prose — and some of those sentences are fabricated tool calls. zkML proves the wrong thing at minutes per query. The blockchain already wrote an unforgeable receipt for the actions that matter, and a 12ms signed receipt covers the rest.
Speculative decoding lets a small, even adversarial, drafter propose tokens that a big model verifies in parallel — and the output is provably the big model's, unchanged. Real drafters land at α ≈ 0.6–0.8 for a ~2× win. But the verifier still runs every token, so it's a latency win, not a trust win.
An on-chain agent acts on facts it reads from an RPC it has to trust. ZK coprocessors swap that trusted read for a proof — and the punchline is succinctness: proving a query over a year of blocks verifies for the same flat ~300k gas as one slot. The mechanism, the anchor problem, real-time proving.
A perp has no expiry, so only the funding rate pegs it to spot. On Hyperliquid that's an hourly cash flow AI agents now harvest delta-neutral — a $10k position at +0.02%/8h pays ~21.9%/yr. The mechanism, the carry math on real rates, and why it's carry, not alpha.
Decentralized AI networks have to turn many validators' subjective quality scores into one reward number. Bittensor's Yuma Consensus uses a stake-weighted median and clips the rest — robust to a <50% bloc. Then a parasite shows up: copying the consensus pays better than producing it.
Decentralized RL splits the actor from the learner across the internet: the policy a worker acts with runs several steps behind the one that learns. INTELLECT-2 held reward at 4 steps stale; SparrowRL cut the broadcast 79x. The bandwidth and staleness taxes, and what the chain secures.