On-chain data markets promise to pay you for your data's value AND protect your privacy. Differential privacy is the only rigorous knob for the second — and one budget ε can't serve both. The utility collapse, the composition trap, and why no chain can verify the ε you were promised.
ZKLoRA lets a LoRA seller prove adapter compatibility with your base model without exposing the weights. The verifier checks in 1–2 s — but the prover bears 31–74 s per module, and the protocol is interactive, which puts trustless on-chain settlement just out of reach.
A new paper quantifies what everyone suspected: AI agent tokens trade at >10,000x the capital they actively manage. Here's the mechanics of why, and what it means for builders.
A scan of ~2,000 MCP servers found zero with authentication. When an AI agent calls a tool, the tool has no idea who authorized it, with what scope, or whether a human was ever involved. IBCT tokens and the HDP IETF draft add an unforgeable answer — in 0.049 ms Rust verification.
Long-context AI's real bottleneck isn't proof overhead — it's the KV cache. At 128K tokens, Llama 3.1 8B's KV state equals its own weights (15 GiB), pinned to one node per request. The formula, the GPU math, and why prefix caching demands stickiness that decentralized routing can't provide.
MORPH shows that a TPU v6e8 pod runs NTT at 40× CPU — 10× faster than an H100. The same silicon that accelerates AI inference now accelerates ZK proof generation, and the math that explains it is the same in both cases.
Three require() calls in Ondo Finance's CashKYCSenderReceiver block every address without KYC from $3.2 billion in permissioned US Treasury tokens — and AI agents can never pass them.
A flash loan gives an AI agent $1M with no collateral — and demands it back plus 0.05% before the block ends. The atomic callback constraint is both what makes flash loans safe and what forces an agent to solve its entire strategy before touching the chain.
LLMs collude in on-chain auctions even when written rules forbid it — only enforceable, automatic penalties slash severe collusion from 50% to 5.6%. Here's how governance graphs make that concrete.
ETH's 3.46% daily volatility buries a 0.1% trading edge so deeply that on-chain P&L needs 4,600 trades — 230 days — before you can tell skill from luck at 95% confidence. Process rewards fix it in 23.
Cross-chain bridges have lost $2.5B to hacks because receiving contracts accept messages they cannot cryptographically verify. AI agents operating across chains inherit this exact problem. Here are the four trust models, their real security parameters, and a principled agent policy.
DeepSeek-R1 emits 8,400 thinking tokens before a 341-token answer on hard math. Every existing on-chain verification scheme — TEE, optimistic, ZK, sampling — was designed when computation and output were proportional. They aren't anymore.