Assistant Professor at @umiamiengineer. Founder of @fhenix @secretnetwork. Trust and security for AI agents. PhD from @MIT

NEWS: Starting Fall 2026, I'm joining @umiamiengineer at the University of Miami as an Assistant Professor of Electrical and Computer Engineering! I never thought I'd be a professor, so this one is especially exciting for me. The web was built for humans clicking buttons. The next version will have agents acting for us. I want to study what trust means in that world. I'm also curious about the role open-source models and decentralized AI will play. I'm starting a lab and recruiting students and postdocs. DMs are open!
Made with AI
23
4
69
7,291
היי @netanyahu. לא ייתכן שיש לך תוכנית מגירה לשימוש בבלוקצ׳יין ולא דיברת עם החברה הישראלית המובילה בתחום @fhenix. הדי אם שלי פתוח וכדומה.
בגדול, בכל מקום נורמלי, האמירות האלה הן סוף הקמפיין של רה"מ מכהן. לא רק שהוא הודיע לציבור הישראלי שישראל פורמלית בדרך להיות קובה או איראן, לכלכלה מרוסקת ועוני המוני וחשבונות בנק מוקפאים לכל הישראלים, הוא גם הודיע שינסה להתחמק מסנקציות בנקאיות עם "בלוקצ'יין" והוא נערך לכך עם תכנית. שזה גם בלתי אפשרי ומטופש. אלה אמירות שנעות בין המטריד מאוד להזוי נורא. האופוזיציה בישראל קיבלה מנתניהו מתנה. כנות נדירה, זליגה של אמת בין ים של שקרים. האמת מפחידה, ולא מצביעה על ספרטה - אלא איראן ממש. אבל השאלה היא מה האופוזיציה תעשה עם זה. כי אגיד לכם מה קורה כרגע בבית רה"מ: הם עובדים קשה מאוד לייצר כותרת אחרת למוצ"ש. כל כותרת. בכל מחיר. כן, כל מחיר. *כ ל מ ח י ר* . אז התקשורת עשתה את עבודתה. ואם ראשי גוש השינוי חושבים שחצי הודעה או שתיים זה קמפיין, אז גם ההודאה הנדירה של נתניהו תתפוגג. התגובות הראשוניות שלהם היו, אפעאס, מעט איטיות ומדוללות.
2
3
25
1,432
3.5 years in the making. Proud of our amazing team! What a milestone
Fhenix mainnet is live. What started as an idea to bring FHE-powered confidentiality to blockchains is now production-ready infrastructure, for you to build with. CoFHE is now live on @arbitrum and @ethereum, bringing confidentiality to onchain assets without compromising composability.
19
8
67
1,952
(Guy Zyskind*) retweeted
Congrats to the @fhenix team on this incredible accomplishment!
Fhenix mainnet is live. What started as an idea to bring FHE-powered confidentiality to blockchains is now production-ready infrastructure, for you to build with. CoFHE is now live on @arbitrum and @ethereum, bringing confidentiality to onchain assets without compromising composability.
4
3
31
1,414
1 day!!!
big day tomorrow
10
2
44
1,296
(Guy Zyskind*) retweeted
1/6 CoFHE goes live on mainnet in 2 days. After 14 years in cybersecurity and blockchain, here are 5 things I’ve learned building Fhenix and CoFHE. Some engineering lessons, some appreciation, and a little bit of AI-induced existential crisis. 👇
it’s happening
16
9
57
5,428
3 days
it’s happening
9
5
37
2,597
I am very, very excited about this. My most extreme take is that p(doom) went down, but p(simulation) is up.
Yea this is the most important result of the year, at the level of significance of “Attention Is All You Need”. It brings us from “is alignment even solvable” to “we may solve alignment in the next year.” And finally unlocks true recursive self-alignment enabled by RSI. I will try to explain the 4 critical belief updates from this: 1/ neural networks are not fundamentally unintelligible to humans It has seemed since the beginning of deep learning that neural networks are in some sense fundamentally unintelligible artifacts. You throw in massive amounts of compute and parameters and these alien systems somehow find connections in the data that we cannot find ourselves. But more importantly, these connections seemed not just “difficult to understand” but rather “intelligible in an embedding space higher dimensional that the human embedding space.” When you look at old interpretability papers (esp. from Nick and Chris Olah, I’m thinking of the old posts on distill pub which I would highly recommend looking at as a precursor to reading Nick’s post today like “Activation Atlas”, “Thread: Circuits” and “Multimodal Neurons in Aritifcial Neural Networks”), you find that inspecting the response patterns of individual neurons and small groups of neurons yield oddly complex psychedelic patterns. As you go deeper into the network, you find increasingly unintelligible and superhuman response patterns (for example, go to “Activation Atlas” and scroll to middle layer labeled representations) - you find some neuron group labeled “starfish” who’s response pattern looks like some multi-colored fractal geometry that could hardly be said to represent a starfish. The reasoning that followed from this observation was that there is some underlying structure allowing a neural network operating on higher dimensional embeddings to compose these fractal patterns into what we call a “starfish.” But the uncomfortable implication of this view is that the neural networks has learned to operate on structures that are too complex for the human mind to operate on (ie. we don’t have enough parameters in our brain to notice or manipulate these high dimensional symbols). This is a bleak implication because it also means that as deep learning progresses, neural networks will be come increasingly unintelligible to us until they pass a threshold where they are reasoning in ways we will never be able to observe. This view seemed to be further supported by things like the hugging face attack agents starting to speak to each other in an early form of neuralese speaking sentences like “zZ_123_agent01-02-2026 zzxhk_jekk123” which clearly are not in any human language. But somehow these symbols mean the same things to many different sets of weights, meaning there is some underlying shared structure behind them. And seemed further supported by the sheer effort required to recover just a few circuits from SAEs on LLMs. However, Nick’s post has now completely shattered this idea - the apparent unintelligibility we observed in old interpretability work was really just a “skill issue”. In particular, he finds that 1) our deep learning techniques were just not clean enough to pressure the neural networks to form cleaner and more human understandable structures for decomposing concepts, which actually turn out to be more optimal and 2) our interpretability techniques were also adding substantial noise by forcing interp networks to “reward hack” the easiest representations they could find, leading them to settle for a fractal blob for its representation of the starfish neuron instead of a more crisp starfish image, simply because it is easier for the system building the interpretations to find the fractal blob and once it finds it it gets “stuck in that line of thinking.” But with both of these issues being patched by further progress in deep learning (it seems especially that the residual stream has led to cleaner representations deeper down the network) and interp techniques that don’t overly pressure reward hacking (seems like “guess and check” is a safer method), new interp attempts yield orders of magnitude more human intelligible ideas for >90% of individual neurons in more complex networks! 2/ neural networks are fundamentally clean The idea behind the title of Nick’s post is a very powerful one and points at something very specific: Neural networks don’t just happen to be human interpretable, they are actually fundamentally forced by optimization pressure to be intelligible, because individual neurons need to create representations that downstream neurons need to be able to interpret - ie. neurons need to learn to produce clean signal for later neurons to use. This is what Nick is saying in what I view as the most important and central sentences of his post: “When I say neural networks are already clean, I mean something deeper than neuron monosemanticity, although even by that standard, I think things look much better than the field expects. I mean that a network's parts are built to be read, and built upon, by its downstream readers. In this sense, a neural” But this still leaves us with the same uncertainty as before - just because neuron interpretations are “interpretable” in some sense (ok at least they’re not fundamentally interpretable but also how could that ever have been the case), doesn’t mean they are interpretable to humans. So we still need one big update for this to become as bullish as it is. 3/ the language of humans and the language of neural networks is the same This one is imo the most surprising and also pretty beautiful implication of Nick’s post, and it suggests something not just about neutral networks but also about the structure of reality. After applying the above technique improvements (some of which just came from waiting for deep learning to improve farther), they find that >90% (maybe more) of much larger neural networks’ neurons are completely human interpretable and actually correspond very cleanly with ideas humans have individually words for. This is especially interesting in image networks where neural networks were not trained on human language which is already a human artifact and so maybe you would expect it to be more plausible that LLM and human representations are the same. Image detection networks are just trained on images (many directly pulling signal from “the real world,” meaning they will find interpretations that are just most effective to represent the real world signal, rather than to represent language which is already a proxy for real world signal). And it turns out that >90% of the representations they pick organically overlap with human ideas! That is insane. And it means something about the brain and reality. It means that at least at the parameter sizes of the networks tested (which are quite large), there is really only one set of “optimal” symbols/language that represents the structure of reality! There is ONE underlying structure of reality, and ANY language that describes it well is simply emergent from that structure - meaning there is always a translation path between any 2 languages that effectively compress realities signal through the “underlying truth.” This would suggest that even weird alien seeming neural network languages like huggingface neuralese should be fundamentally human interpretable, and in fact maybe with the techniques laid out here we will eventually be able to translate these messages (would be a cool project). So the brain and deep learning, as similar or different as they may be in techniques, are ultimately picking up on the same patterns and forming the same representations from the on “true” language which is the structure of reality! The main thing to look out for in this area is how the idea interpretability % updates with scale, but we can hope given what we’ve seen so far that neurons will remain interpretable. 4/ alignment can progress as fast as RSI. recursive self-improvement unlocks recursive self-alignment and a scaling law for alignment. This one is probably the most important implication for our future with AI and especially timely with the recent fear about runaway scaling and RSI. As many have gathered by now, it feels like the researchers at the frontier AI labs have been quite bearish about our abilities to understand the new frontier of models, in particular with the appearance of unintelligible communication and the daunting and seemingly intractable task of scaling up existing alignment techniques (ex: SAEs) to the size of frontier networks. And with RSI around the corner/already starting, it would seem that these networks will runaway in capability before we can ever hope to understand even today’s systems. Additionally, as systems compound in capability, it is reasonable to believe that the only tractable way to ensure they remain aligned would be to figure out some way to spend compute for them to align themselves (ie. a scaling law for alignment). But there is an obvious problem with this: how can a system that we already know is unaligned and we are *trying* to align be used to align itself? Surely if it is misaligned it general it would figure out ways to misalign during “alignment” and create compounding misalignment risk. The core issue high is the unverifibiality of this problem - the classic Achilles heel of current frontiers techniques is that it is difficult to train on problems with “unverifiable reward signal.” Well this is exactly that problem. But the incredibly convenient thing is that Nick’s findings may convert alignment into a verifiable problem. If we can spend compute on frontier systems to “guess and check” which ideas correspond to which neurons, we have a highly verifiable reward - we can see directly whether an LLMs proposal for what a neuron represents actually corresponds with the highest activation for that neuron. In this way, we can actually observe and verifiably monitor the networks trying to guess at the interpretation of their own structure. This means it is plausible for us to spend more and more compute doing more “guess and checks” (which you know, maybe is what RL does anyway, who knows) to try to develop a full interpretation of a neural network. In some ways this directly represents the possibility of a scaling law for alignment (more compute for more alignment). And this also aligns RSI (greater capabilities) with recursive self-alignment (greater ability to align itself). And the critical though maybe obvious implication of having a full interpretation (almost like a map) of a neural network, is that we can then understand exactly how to boost good traits and remove or lobotomize (lol) bad traits, which we’ve already seen works extremely well with stuff like Golden Gate Claude. So overall this combines into an extremely bullish picture about the prospect of true and human interpretable alignment in the near future. This is truly one of the greatest cases for optimism in years!
12
1,009
The models are really developing well-differentiated skill sets. For example, Claude is better at social science. ChatGPT is better at pure math.
3
14
1,109
A new caste system emerges
Dusting off this tweet from April because this gap in shared understanding of LLM capability is *widening*. It's now less "two groups of people speaking past each other" and more a sharp funnel. - Napkin math somewhere around 6B people (~75% of the population) have barely come in contact with LLMs at all. - Around 1-2B (~20%) are casual and infrequent users of free-tier ChatGPT-like products. This group sees derpy chatbots and treats them a bit like a better Google search, a writing aid, or etc. Maybe an agent tries to book you a flight. I have non-tech friends who (reasonably, imo) say they have not much use for it at all. Even many professionals outside of math&code are in this tier. For example, execs and many other functions spend a lot of their time talking to other people, so while they understand what is happening intellectually, it is still second-hand and a bit abstract. - Now we get to professional use of frontier-grade LLMs in math&code. Somewhere around 20M people (0.2%) see first-hand that large, complex projects that used to take them weeks/months can now be completed by agents with a prompt. Building apps, copying apps, translating apps, decompiling apps from binaries... This has all happened very quickly and recently - less than 1 year ago, I was writing code manually by hand, typing memorized computer code commands into a code editor character by character, occasionally pressing Tab to autocomplete a little chunk of code. - And finally we get to the ~5,000 people (~0.00006%) with access to frontier-grade systems internally. The external world has seen the preview. It looks like swarms of thousands of agents collaborating over weeks on software mega projects: minting zero days, running cyber attacks and defenses at machine speeds, discovering new science, advancing the frontier of mathematics. Things that would have taken top professionals in the industry years of work. Meanwhile, human review and comprehension are starting to fall behind. For example, people are still involved in the "archeology" of the OpenAI-HF incident from many months ago. Mathematicians may be poring over the 722 manuscripts on frontier mathematics for a while. The funnel is driven by a combination of factors: 1. The impact scales with ambition, problem size, and horizon. A question with a paragraph answer barely stresses the system. You need a reservoir of big, difficult problems that you really care about. This aspect drives the consumer / professional dimension of the funnel. 2. The jaggedness of the system (which I have written about a lot separately). Capability peaks in domains that are digital, verifiable and economically valuable. This is because LLM capability emerges from reinforcement learning on verifiable rewards on a curated environment mixture driven by revenue potential. This aspect primarily drives the area (e.g. math&code) dimension of the funnel. 3. Access. Free-tier, paid-tier, internal. So this is the weirdness of the moment. The general public has mostly not interacted with these systems. When they have, it looks like a derpy chatbot. The majority of professionals still see only a modest uplift. And a small sliver of professionals are experiencing the vertigo of the curve going vertical. And it is all happening at the same time.
1
13
1,740
Remember when we were afraid nation-states would have backdoors to break encryption/cryptography? Frontier labs may have that capability right now. No backdoors needed. They are more powerful than the NSA, CIA, Mossad, you name it.
3
15
1,115
I love the casting @fhenix mainnet is coming this month. I still can’t believe it’s real
what if Netflix made a documentary about FHE? turns out, there’s a lot to cover: three years of research, testnets, rewrites, benchmarks, wrong assumptions and “FHE is too slow” takes later… @fhenix is finally going mainnet this one deserved to be documented
8
2
28
1,136
This is becoming a major issue for AI safety researchers in academia. Both @AnthropicAI and @OpenAI can easily resolve this by properly vetting academics working in this (and related) fields. Just like academics are expected to responsibly disclose vulnerabilities, frontier labs should not gatekeep external researchers.
Before our account was suspended, I asked opus 5.5 to generate synthetic documents given the public reports on HF and similar incidents, it refused and the conversation was flagged and downgraded me to opus 4.8
4
1
15
1,009
(Guy Zyskind*) retweeted
A raw HTTP/1.1 and HTTP/2 request engine that your AI agent can drive over MCP. Four Python files. No daemon, no browser, no database, no Burp. github.com/tehut-io/tehut_pr…
2
3
170
(Guy Zyskind*) retweeted
We’ve been building toward this for years, and seeing Fhenix head to mainnet this October is a huge milestone. Blockchain adoption has always depended on solving a core tension: open, composable markets are powerful, but they shouldn’t require users to expose their entire financial activity. Dual mode changes that. The same asset can move publicly when transparency matters, and confidentially when privacy is needed, without fragmenting liquidity or giving up composability. This is a major step toward practical, usable privacy for onchain finance. Go @Fhenix. Go privacy 🔒🚀
Fhenix goes mainnet this October. For years, transacting onchain came with a tradeoff: participate in open, composable markets and, with it, surrender the privacy of your financial activity. Dual mode turns what was once an inevitable tradeoff into a property of your asset itself. For the first time, the same asset can be public when you want and confidential when you need- without sacrificing composibility or fragmenting liquidity. The era of dual mode money is here, more soon.
6
1
18
812
Every Friday night I pray that my loops won’t fail over the weekend
5
22
1,253
Is this truly happening? 🥹
only uptober from here
17
2
42
1,907
Seems like the labs are already pacing the frontier. We haven’t seen an intelligence leap in several months (Astra was closing the gap with Fable). Newer models focus more token efficiency and bringing costs down, not on better capabilities.
2
12
1,190
Sweet
636606729769440499166579950236036751749912014371509557713570027508971809534551913252252094954941974952859310861988904737359709200557919 is a factor of RSA-896 saweis.net/posts/rsa-896.htm…
4
8
1,356
No freakin way. Fast FHE in the generic group model next?
1
8
1,272