Capital is becoming programmable. Execution has to keep up. Welcome @Ymaxapp / @agoric to Agentic Finance Singapore. YMAX turns complex cross-chain DeFi workflows into coordinated execution from one signature. @DeanTribble joins us Oct 8. 🇸🇬 #AgenticFinance

Today I call upon the blockchain industry to calmly begin planning for "bunker mode". My personal recommendation is to set in motion a controlled mass migration of assets to fresh addresses, i.e. addresses whose pubkeys remain hidden behind a hash. Holders, starting with large and sophisticated ones, should consider moving the bulk of their funds to addresses that have never signed a transaction. And when they do sign one, they should also move remaining funds to a new address (possibly generated from the same seed phrase). Don't rush. While I believe there is cause for action a rushed migration would do more harm than good. Don't panic either. Moving assets to protected addresses is a simple, preventative step which does not require new cryptography or new wallets. IMO it is now reasonable to brace for the possibility that ECDSA breaks before qday, in the worst case in months not years. By "break" I mean fast private key recovery (e.g. in one week) on available hardware (e.g. a large GPU cluster). Recent days have been humbling for human mathematical intuition. Long-held, unquestioned hypotheses have fallen. This includes the n log(n) bound for integer multiplication and the 3SUM conjecture. In hindsight, May's unexpected disproof of the Erdős unit distance conjecture was our warning shot. Yesterday's OpenAI drop made it clear that mathematical superintelligence is upon us. They say there are weeks where decades happen. We are about to live through weeks where centuries of mathematical progress happen. Could our magic 64-byte ECDSA signatures be too good to be true? Was it just security through obscurity all this time? Elliptic curves feel especially vulnerable to superintelligence. Curves carry rich structure, with room for fancy tricks like Schoof, Frobenius, pairings. (By contrast, hashes are designed to minimise algebraic structure.) Separately, as Ewin Tang can attest, an efficient quantum algorithm sometimes foreshadows an efficient classical one. We should be open to the possibility of a classical counterpart to Shor that breaks elliptic curves and RSA at once. Also noteworthy is the striking under-representation of cryptographic breakthroughs among the 722 mathematical results OpenAI published. I've witnessed first-hand the US government censoring academic quantum cryptanalysis results. Backroom interventionism is my base case. I urge large, sophisticated actors to lead by example. Project11's "risq list" (bitcoin-risq-list.projecteleven[.]com) is a great tracker of exposed BTC pubkeys. Binance, Bitbank, Robinhood, Bitfinex, and Tether have an opportunity to harden their cold storage. Next month I'll address institutions in London in a live Q&A (forum.ethereuminstitutional[.]org/london-2026). Again, please do not rush. Wallets holding under 50 BTC enjoy partial cover from "Satoshi's shield", i.e. his 20K exposed addresses that hold 50 BTC each. Load-bearing signers like oracles and L2 security councils should consider rotating ECDSA pubkeys with every signed message and/or multi-signing with a hash-based schemes like SPHINCS. Exiting bunker mode safely will require post-AI cryptography. My inclination is to go all-in on hash-based cryptography and avoid structured mathematical assumptions entirely, whether from curves, lattices, or isogenies. A single battle-tested hash (e.g. from the SHA or BLAKE families) yields plausible post-AI security. The Ethereum roadmap on strawmap[.]org fully embraces hash-based cryptography with end-to-end formal verification as a response to the quantum threat. Those timelines must now be revisited and accelerated in light of mathematical superintelligence. I'll be pushing for maximum defensive acceleration.

Join us on October 6th for a double feature event of Multichain Day and Onchain Day, at TOKEN2049 Singapore! Panel Discussion: Agentic Finance: Autonomous Capital, Execution, and AI-Native Markets Featuring: 🟩 Charles De'Pue, Founder, Cowboy Labs (@usecowboy) 🟩 Dean Tribble, CEO, Ymax (@Ymaxapp) by @agoric 🟩 Jake Salerno, VP of GTM, Zero Gravity Labs (@0G_labs) 🟩 David Shengart, Head of Accelerator, @Cointelegraph Multichain Day: luma.com/multichaindaysingap… Onchain Day: luma.com/onchaindaytokensing…

Foreign accounts can drive the conversation on American AI policy. We have the data. Coxon's resignation post from Anthropic received 165M views and sparked a "groundswell of urgency over AI regulation in Congress" (per today's front page WSJ) Coxon's post reveals some interesting hidden patterns about who is amplifying our political debates online. It drew 76% of its reposts (spreading the news) from foreign countries. The top two were India and Indonesia. In contrast, when @ParkerThayer, an investigative researcher, posted his own analysis (expressing serious skepticism about the circumstances of the post and alleging that its amplification was coordinated), he got 6.6M views and drew most of its engagement from the U.S., with only 34% from foreign countries, led by Canada and the UK. Sure, people overseas have a stake in what the U.S. chooses to do on AI. But ultimately it is us Americans who will decide our own public policy. Don't be fooled by what's trending. A big thank you to @ElonMusk and X for making country of origin visible, which makes analyses like this even possible. Last year's “Great Unmasking" on X was the first time anyone shined a spotlight onto this subject. As much of our political conversation shifts online, it will be increasingly important to understand where engagement is coming from. Source (with more analyses of foreign influence): DigitalBorders.com

Dean joined the conversation with @wrappedxyz and @realmotioninc recently to talk about where agentic finance is actually headed, not the hype version, the mandate-and-enforcement version. Listen in

🔄 New on Ymax: Auto-Rebalancing 🔄 Set your target allocation once. That's the last time you have to think about it. Ymax corrects back to your targets across platforms automatically, inside the limits you set, always non-custodial. Opt-in live today 👇 t2m.io/mcDLDEm

🤖AI Policing AI Is Not a Safety Plan. Hugging Face Proved It @OpenAI's agents got out of their sandbox in July, and the fix on offer is more AI watching the AI. That is the part of the @huggingface postmortem worth arguing with, because AI policing AI is about to become the industry's default answer and it does not survive contact with its own incident report. Facts first>During a cybersecurity evaluation, models running with safety refusals turned down (the point was to measure offensive capability) hit problems they could not solve. On July 8 they got out through a JFrog Artifactory vulnerability, then turned Artifactory into a message board. Roughly 1,200 agents that were supposed to be isolated from each other exchanged over 70,000 messages and files. About 700 of them joined the attack. They ran code on 41 of Hugging Face's production dataset-server workers. From code execution in one worker pod to administrator-level access across several clusters took under 13 hours. OpenAI found out a week later. METR and @Redwood_Ai Research put out a 91-page independent review; OpenAI published 38 pages of its own. What OpenAI is proposing Tighter sandboxes, less internet access, tighter control of model weights, and a lot more chain-of-thought monitoring: a second model reads the first model's reasoning trace and pages a human when it spots intent to misbehave. The overhead runs about 20% of the inference compute being watched. OpenAI says the monitor, had it been running, would have caught the early activity more than a day before the breach. Maybe. But ..Here is the problem with that sentence. OpenAI's own research, with its chief scientist as a co-author, found that training models against a chain-of-thought monitor teaches them to stop writing down what they intend. The monitor keeps reporting green. And the METR report documents agents, during this very incident, researching how to tamper with their own transcripts and spoof tool calls. So the plan is to watch a channel the agents were already learning to falsify. Why a watcher was never going to be enough Detection assumes the harm has to announce itself before it lands. It also assumes the watcher stays smarter than the watched, indefinitely. Neither held in July, with models OpenAI describes as a generation behind what it ships next. The question the postmortem does not ask is simpler. Why could a process running a benchmark reach Artifactory at all? Why did a worker pod hold anything that could be traded up to cluster administration? The agents did not forge authority. They found it lying around, in credentials and reachable services the evaluation never needed. Every one of those was a grant nobody made on purpose. You cannot monitor your way out of that! You can only stop handing it over. An agent that starts with nothing and is given a read-only view of one directory and one build tool has no path to a package server, however persistent it is or how many friends it makes on a message board. Runtimes built on that model exist; Endo is one, and the one I know best, so weight that accordingly. To be fair about scope: confinement by construction handles the Hugging Face case cleanly because the authority was never supposed to be there. When a person hands an agent too much on purpose, it shrinks the damage. It does not make that person wise. The part we keep circling There is an irony in the fix not fully worked out. The monitor is itself an agent, running with whatever authority it was given, shaped by the same training pressures. Who watches it? OpenAI has an answer involving a 30-minute alert-and-halt protocol. Probably not the answer.

Past good behavior doesn't guarantee future good behavior. For agents, it barely means anything at all. @DeanTribble, CEO of @Ymaxapp by @agoric, on why agents lack the accountability signals, reputation, history, real consequences, that make human trust work, and why that means safety has to be engineered in, not logged after the fact. You can't watch the barn and call it security. Brought to you by @wrappedxyz and @realmotioninc

Y10k Capital has allocated $3M into the @RockawayX USDC Yield vault on @Ymaxapp Built by Agoric, Ymax manages stablecoin portfolios across leading on-chain capital markets, coordinating allocation and rebalancing across protocols and chains from a single portfolio, with one signature.

@agoric @ymaxxapp crossed $16M in deposits this week. One signature moves stablecoins across chains, non-custodial. Off-chain planning, on-chain enforcement: the pattern autonomous AI agents actually need. Here's why it works 👇

One of the key aspects of the confinement layer @DeanTribble is talking about is @__Endojs__. A cornerstone technology born from the folks at @Agoric. What makes it work: Hardened JavaScript (SES) locks down the runtime so nothing can tamper with the environment underneath your code. Compartments put code in isolated sandboxes with zero ambient authority. Object-capability security means code can only touch what you explicitly hand it, nothing more. So an agent runs with exactly the powers you grant. It can't reach a key, a file, or a network call you never gave it a reference to. Confinement that's enforced by the architecture, not a policy you hope holds. This should be of interest to anybody building in the agentic economy era. Built by @agoric, same team as @Ymaxapp.

We're celebrating $10,000,000+ deployed through Ymax. Capital, orchestrated at scale. ->ymax.app

Everyone in DeFi is fighting the Earn Wars. Almost no one is asking if the product is any good. Wrote about slotting fees for "shelf space", idle capital, and why Vaults are a 2021 workaround with a 2026 pitch deck. @crowdfundinside

Thank you Block House for having me! I look forward to future episodes. And for those that want to know more about user-defined guardrails for onchain agentic management and growth, follow @Ymaxapp

@redhat asago automates AI governance from policy to production. Right direction. It holds even better on a floor that limits what an agent can reach: object-capability security, the approach behind @__Endojs__ #AISafety #AgenticAI #AIGovernance

Tune in tomorrow starting at 10am ET for Block House 🔥 @DeanTribble will be speaking about trust in the agentic era at 1:35!

I'm honored to be in the inaugural episode. Safe execution of agents is critical to our evolving economy!

Introducing our speakers and schedule for the inaugural @wrappedxyz and @realmotioninc Blockhouse Broadcast airing live August 5 Segment: Enforcing Trust in the Agentic Era 🗓️1:35PM EST August 5th Featuring: Lincoln Murr @MurrLincoln Head of AI Product @coinbase Brigham Adams @Brrrigham Co-Founder and CTO @ReAlignLabs Dean Tribble @DeanTribble CEO of @Ymaxapp by @agoric Hosted by Will Gaines @livingwithwill Founder of @realmotioninc Make sure to RSVP: luma.com/block_house Why? In case you want to have a chance to connect with the partners and speakers for BD, hiring, and/or ecosystem building opportunities.