Resources / Web3
Problems onchain, and how we would solve them.
Problems we found on Solana, Ethereum and across the industry: payments that settle blind, reputation that can be bought, admin keys that drain treasuries. Each article cites its evidence and proposes a design.
- Agent payments4 min read
Agent payments settle on promises. They should settle on proof
Problemx402 and payment channels let agents pay for APIs and compute, but settlement is blind to whether the inference ran, on which model, or how many tokens it really used.ProposalSettle only against two signatures: the agent's spending voucher and a usage receipt signed inside the provider's attested enclave, with payments stopping the moment attestation lapses.Read the proposal - Agent reputation3 min read
Half of agent payment volume is fake. Reputation has to start from money that moved
ProblemAnalysts found that roughly half of x402 transactions were wash trading or self-dealing, and star ratings are cheaper still to fake, so neither can safely gate money.ProposalScore agents on net demand: settled stablecoin payments, with self-dealing and circular flows removed and each dollar weighted by the credibility of the wallet that paid it, published as a verifiable onchain account.Read the proposal - DeFi security3 min read
In 2026, DeFi lost more to keys than to code
ProblemMost stolen value now flows through compromised private keys, thin multisigs, single-verifier bridges and governance powers with no delay, which a code audit does not cover.ProposalAssume a key will be stolen: split and timelock admin powers, rate-limit outflows, delay collateral listings, require several independent verifiers, and wire monitoring that can pause before the treasury empties.Read the proposal - Due diligence3 min read
What can this contract do to your money?
ProblemAnswering whether an owner can mint, freeze, change fees or upgrade means reading dozens of files behind a proxy; scanners give unexplained yes or no flags and chatbots lose the context.ProposalIndex the verified source with Solidity-aware chunking, follow proxies to the real implementation, combine deterministic detectors with hybrid retrieval, and answer only with line-level citations.Read the proposal - Wallet security3 min read
One signature, every asset: the EIP-7702 delegation trap
ProblemA single EIP-7702 authorization routes every future call from an account to delegate code; phishing sites disguise it, and early analysis found most mainnet delegations pointed at copy-pasted sweeper contracts.ProposalTreat delegation as the most dangerous signature a wallet asks for: allowlist audited delegate contracts, show the target in plain language, simulate effects, scope permissions with session keys, and make revocation one tap.Read the proposal - Interoperability3 min read
Fifty chains, one user: building across Ethereum's L2s
ProblemLiquidity and users are scattered across more than fifty L2s, each a silo with its own balances, bridges and trust assumptions, and few have reached full decentralisation.ProposalBuild chain-abstracted apps: smart accounts with unified balances, intent-based transfers filled by solvers (ERC-7683), canonical bridges only for large or slow moves, and every route capped by value at risk.Read the proposal - MEV3 min read
Sandwiched on Solana: protecting swaps from MEV
ProblemSandwich bots front-run and back-run user swaps on Solana through private order flow, and most protection today relies on users choosing a tight slippage setting they do not understand.ProposalProtect at the protocol and app layer: oracle-bounded minimum output, sensible default slippage computed per trade, bundled or private submission, and RFQ or batch execution for size.Read the proposal - Tokenization3 min read
Tokenized is not liquid: closing the RWA secondary-market gap
ProblemMost tokenized real-world assets only move through issuer mint and redemption; secondary trading is thin because transfer rules, slow settlement and missing integrations were never designed for it.ProposalDesign for liquidity from day one: portable onchain identity so approved holders can trade with each other, async redemption standards, an instant-redemption buffer, NAV oracles and pre-approved DeFi integrations.Read the proposal - Stablecoins3 min read
The GENIUS Act turns stablecoin compliance into an engineering problem
ProblemStablecoin issuers and payment platforms face new reserve, disclosure, AML, sanctions and freeze obligations, while most stablecoin stacks were built for speed with compliance added by hand.ProposalCompliance by architecture: role-separated freeze and burn powers with audit trails, screening at every edge, travel-rule data in the payment flow, reserve data published on a schedule, and reconciliation that closes daily.Read the proposal
One company at a time