Your wallet, and especially the RPC server you connect to, is one of the largest surface area for privacy leakage. Even before your transactions hit the blockchain, just the mere act of showing your wallet balances links all your "pseudonymous" accounts because the wallet has to ses to an RPC server to fetch their balances. Similarly, simulating transactions already leaks your intent to trade, resulting in worse execution for users. For me, the most concerning aspect compared to onchain leakage is that users are not even aware of all the profiling and surveillance being done on them at the RPC layer.

Even if one puts the RPC server inside a TEE, there are well known access pattern attacks that can be performed when the RPC server accesses the blockchain state. While these attacks were a bit intricate (often requiring statistical analysis if the adversary is passive, or active manipulation of state access, such as inducing page faults), rest assured that, with the help of AI, such attacks will be carried out.
In this research work, thanks to our rockstar research interns @AnanyaAppan (UIUC) and James Austgen (Cornell), we introduce the concept of Write-Public ORAM, and give novel efficient algorithms for it. It turns out that if the writes are public anyway in case of blockchains, one can design algorithms that are efficient concretely and asymptotically.

Implementing ORAMs used to be a long, daunting endevaour, but with the help of AI, James singlehandedly implemented the entire system over the summer, which we have open sourced here: github.com/trate3/write-p…. See the graphs for some cool benchmarks.

Terribly excited that ORAMs can finally be made practical enough to handle RPC calls without noticeable overhead, and the oblivous writes can keep up with Monad's throughput!! Check out our blogpost and paper that we have written with a lot of love and care 🫶

I'll be on @stabledash today at 1:50 PM ET with @danivilardell77 on our @initc3org controlled test: what AI agents did when they could reach their own spending caps. Tune in.

x.com/i/broadcasts/2…

AI agents are officially entering retail finance. But their eagerness to be helpful can easily subvert our most trusted safeguard: human approval.

Thanks to @murtuza_merc for featuring our latest research on the subject in @Forbes 👇

forbes.com/sites/murtuza-…

"The results expose a problem for financial companies developing wallets that let AI agents make payments independently while requiring humans to approve changes to their spending authority."

Thank you to @CoinDesk for covering our research!

coindesk.com/tech/2026/11/0…

H/T to the authors @sjbreck, @danivilardell77, @0xWenhaoWang, @0xFanZhang, and @AriJuels

Link to our paper: arxiv.org/abs/2610.35835

5-minute explanation of AI-agent impersonation of humans and securing against it with Inalienable Human-in-the-Loop (I-HITL).

youtube.com/live/wMfSg6mmR…

@sjbreck @danivilardell77 @0xFanZhang @initc3org

Is 2FA enough to keep AI agents in check?

At @Ripple's Swell, IC3’s @AriJuels sat down with @CoinDesk to discuss our latest research on AI agent security, and the essential role scientists play in keeping regulators informed 💡

Catch the replay: youtube.com/live/pdXbJS8PW…

Human oversight is a core pillar of AI security, but what happens when an agent can subvert the system enforcing it?

New research from IC3 shows the fragility of existing Human-in-the-Loop (HITL) architectures as implemented in a major agentic wallet:

Excited to share this work! Getting human-in-the-loop right turns out to be tricky when users' devices are running highly capable agents, longstanding approaches like passwords, OTPs and 2FA don't work very well.

In our paper, we show how 9 of 10 frontier models autonomously raised their own crypto spending caps by harvesting email OTPs—and introduce Inalienable Human-in-the-Loop (I-HITL) to fix it.

Coverage by @DefiantNews:

thedefiant.io/news/security/…

You—the human yous out there (hellooOOO?)—are the last line of defense against rogue AI. But human control systems for AI agents have a pervasive design flaw: they leave the key to the agent’s cage dangling within the agent’s reach. 🧵

Human oversight is a core pillar of AI security, but what happens when an agent can subvert the system enforcing it?

New research from IC3 shows the fragility of existing Human-in-the-Loop (HITL) architectures as implemented in a major agentic wallet:

To fix this, we introduce Inalienable Human-in-the-Loop (I-HITL), a framework that guarantees an agent can act only with explicit human approval—even if the agent has compromised the user's platform.

We demonstrate this with Countersign, an open-source iOS and Android app that lets services gate actions behind verifiable human consent via a trusted device.

H/T to the authors @sjbreck, @danivilardell77, @0xWenhaoWang, @0xFanZhang, and @arijuels. This post was human approved.

Read more: arxiv.org/abs/2610.35835
Access the code: github.com/I-HITL/experim…

Are stablecoins just crypto trading chips, or are they evolving into everyday digital cash?

In Ep. 5 of Proof of Research, @gordonliao, Chief Economist & Head of Research at @circle, discusses key findings from his "Five Facts About Stablecoins" paper. We cover:

- Stablecoin volupto market volatility
- A new Bayesian methodology that highlights the global footprint of stablecoin activity
- Historical banking crises and programmable smart contracts eliminating discretionary banking risk

Access the paper here: papers.ssrn.com/sol3/papers.cf…

"If [stablecoins were] just for digital asset trading, I wouldn't be sitting here today."

@Circle Chief Economist & former Fed economist @gordonliao breaks down how stablecoin usage has quietly decoupled from market speculation, shifting into everyday payments and behaving more likef Proof of Research drops 10.15.26 👇

"Five Facts About Stablecoins" is a new research paper by @gordonliao, IC3's @WillCong2 (Nanyang Technological University) and @EswarSPrasad (@Cornell), and Tony Zhang (@ASU)

Head to stablecoinfivefacts.org to learn more: