ancilar (ancilar)

A team was losing a large share of new users at a single step, and it was not their product. It was the wallet. Seed phrase friction, gas confusion, and a checkout that broke at the signature were quietly ending sessions before anyone reached the core experience.

• 1 reply
• 0 recasts
• 0 reactions

An autonomous agent we reviewed could have emptied its own wallet without a single line of malicious code. It held its keys directly and had no limit on what it could spend per action. A bad prompt or a confused decision was all it would take.

• 1 reply
• 0 recasts
• 0 reactions

A protocol used an AI model to score users and adjust their limits on chain, and it could not prove the model produced the result it claimed. Anyone could question whether the output was real, tampered with, or quietly swapped. For a system moving money, that gap is the whole problem.

• 1 reply
• 0 recasts
• 0 reactions

Our team flagged it on the first review pass. Three changes: - removed the mint function, which the project did not need - moved the owner key to a multisig - added a hard supply cap in code so no single error can inflate supply

• 1 reply
• 0 recasts
• 0 reactions

Two hours of work, and the relaunch went out clean the next day. Speed at launch is fine. Shipping privileged functions a team does not fully understand is where the risk lives. If you are unsure what your owner key can actually do, that is the first thing worth reviewing. We are happy to take a look.

• 0 replies
• 0 recasts
• 0 reactions

We surfaced it by freezing the oracle on purpose during testing, then watched the vault rebalance on minutes-old data. The fixes were straightforward guardrails: - a staleness check that pauses rebalancing when the feed is outdated - a sanity bound that rejects price moves too large to be real

• 1 reply
• 0 recasts
• 0 reactions

A token launched straight from a cast came close to being drained in its first hour. The flaw was not exotic. The owner key could mint unlimited supply, and that same key was sitting in the launch bot's hot wallet. One compromise away from infinite inflation.

• 1 reply
• 0 recasts
• 0 reactions