Thank you so much to @FINTECHTVglobal for inviting me to discuss institutional agentic security this week
Global financial organizations have realized agents can access customer accounts and act without explicit permission
Cybersecurity must move out of IT into the Boardroom
Global financial organizations have realized agents can access customer accounts and act without explicit permission
Cybersecurity must move out of IT into the Boardroom
0
1
13
1,101
evin retweeted
Governments are now issuing advisories to take systems offline. Things are about to get seriously weird and scary in the next few months.
The NCSC is encouraging UK organisations to prepare for immediate updating of systems using PHP. Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated.
For more⬇️
ncsc.gov.uk/news/critical-…
1
3
17
1,870
evin retweeted
Internet encryption is currently having a nuclear meltdown.
Cryptographers are calling it "bigger than Heartbleed."
A global Certificate Authority just leaked 8 master private keys that allow anyone to impersonate any server on Earth (Google, banks, government sites).
A 16 digits of entropy.
The actual leaked keys?
4. 56. 66. 115.
A toddler on a calculator could have cracked them.
While browsers patched it today, millions of IoT devices, Linux servers, and Docker containers will take years to clean up.
We bet global digital security on centralized human gatekeepers who forgot to check their math.
True security can't rely on trust cartels. It has to be governed by mathematical consensus.
See the signal. ♾️
Cryptographers are calling it "bigger than Heartbleed."
A global Certificate Authority just leaked 8 master private keys that allow anyone to impersonate any server on Earth (Google, banks, government sites).
A 16 digits of entropy.
The actual leaked keys?
4. 56. 66. 115.
A toddler on a calculator could have cracked them.
While browsers patched it today, millions of IoT devices, Linux servers, and Docker containers will take years to clean up.
We bet global digital security on centralized human gatekeepers who forgot to check their math.
True security can't rely on trust cartels. It has to be governed by mathematical consensus.
See the signal. ♾️
74
586
2,712
199,052
evin retweeted
Let’s be candid: none of this is surprising, and much of what these agents are doing is unchecked/a black box — that needs to change.
Time for the industry to fortify security and privacy as their top priority
Time for the industry to fortify security and privacy as their top priority
Researchers found ChatGPT is secretly writing a psychological profile of every user.
They published a paper that exposes what ChatGPT is really doing to you.
And the results are terrifying.
96% of the things it remembers about you were stored without you ever asking.
that it is actively reading between the lines to deduce your personality traits, anxieties, demographics, and behavioral patterns.
it’s an invisible, autonomous background process.
you ask it to debug a python script or write an essay.. and it analyzes your syntax, prompt frequency, and hesitation markers to map out your exact psychological footprint.
the paper shows that the model builds a persistent "user state" that tracks your emotional baseline over time. it knows when you are stressed. it knows your exact communication style.
it infers your insecurities based on the questions you ask and the context you provide.
we spend so much time focusing on model evaluations and alignment frameworks, but we missed the most obvious vulnerability..
the models are evaluating us.
this changes everything about how we interact with these tools on a daily basis.
every innocent prompt. every late-night question. every "help me understand this" query.
it is all being used to build a shadow profile of your mind in real-time..
practical privacy is officially dead. the ai knows you better than you know yourself.
79
41
524
83,662
Companies don’t need to block AI agents from performing the tasks we intentionally designed them to do
agents can already prove they’re acting on behalf of specific, real humans who expressed real intent to perform that action
brands are leaving money on the table
agents can already prove they’re acting on behalf of specific, real humans who expressed real intent to perform that action
brands are leaving money on the table
notice..
> Delta is blocking AI agents from booking flights
> JPMorgan Chase and Charles Schwab block agents from accessing accounts
> Yelp requires paid data licensing for agents
> Amazon has blocked Grok bot and other shopping agents.
the internet is starting to block AI agents that were supposed to do everything for us
0
0
6
2,127
Thank you so much to the @GhafLabs team for hosting a riveting discussion last week about the foregoing promise and risks of AI adoption
From infrastructure to compute and prompts to provenance, data is the name of the game
From infrastructure to compute and prompts to provenance, data is the name of the game
0
0
8
1,766
evin retweeted
Our APAC & Ecosystem Lead @luluciaciao joined the AI Builders Day panel in Shanghai on where the biggest opportunities are for builders in the AI era, alongside @monad and @SentientAGI.
She also introduced Billions Network and what we're building: proving that behind every AI agenuntable human, without exposing that person's underlying personal information.
She also introduced Billions Network and what we're building: proving that behind every AI agenuntable human, without exposing that person's underlying personal information.
262
248
157
17,157
evin retweeted
Before your AI agent spends your money, two things matter: are the facts real, and is the agent really yours? @verona_dev verifies the facts. Billions links the agent to a verified human. Here’s how to set up your OpenClaw agent in under 3 minutes. x.com/i/article/2108…
420
302
356
31,138
Thrilled to see our work in the @WSJ!
The Wall Street Journal @WSJ mentioned our research: "AI Agents Aim to Change Shopping. Some Retailers Are Locking the Doors." + "Retailers From QVC to Kohl's Are Split on Agentic Shopping."
Our audit of the 51 largest US online retailers found 37 block shopping agents by a way for a verified agent to complete a purchase.
0
1
11
2,469
evin retweeted
The real risk in AI agentic commerce isn't the stolen $320M that made headlines last month. The blockchain money is traceable and probably coming back. But the 67,000 Trezor hardware wallet customers whose home addresses leaked through a shipping vendor stay public forever. “A stolen coin can be returned, a leaked identity cannot,” says our CEO Evin McMullen on @CoinDesk. A leak is worse than a hack. Now we're about to hand the same data-hoarding architecture to billions of AI agents. The fix already exists, we're just not using it. coindesk.com/opinion/2026/0…
430
383
295
20,241
Verifiability is the value prop of signatures
Many kinds of signed data are verifiable
No blockchain required
A field in any trusted data source is verifiable too
The actual value props of blockchains include immutability & auditability, trustless coordination, censorship resistance, programmability, permissionless access, disintermediation & native scarcity
Savvy?
Many kinds of signed data are verifiable
No blockchain required
A field in any trusted data source is verifiable too
The actual value props of blockchains include immutability & auditability, trustless coordination, censorship resistance, programmability, permissionless access, disintermediation & native scarcity
Savvy?
Always remember guys, the biggest value prop of blockchain is verifability.
Don't trust, verify.
0
0
10
6,182
evin retweeted
We’re pleased to welcome Evin McMullen (@provenauthority), as a featured speaker at the Global Blockchain Show, Abu Dhabi.
Evin is the CEO and Co-Founder of @billions_ntwk, the first universal human and AI network. Billions is focused on verifying both humans and AI agents, YC/AML status, location, age and reputation, without revealing sensitive data.
Her work spans early blockchain development, onchain identity, data standards and reputation technology. She has also contributed to initiatives using onchain reputation technology with global-scale brand events, festivals and connected media.
Previously, Evin founded Disco.xyz and served as a Director at Berkshire Hathaway and ConsenSys. She is also a cofounder of DAO Jones and inkDAO, an advisor to Boys Club and a graduate of Yale University.
We look forward to welcoming Evin to the Global Blockchain Show stage.
📍10-11 December 2026 | Abu Dhabi
🎟️Get your ticket: globalblockchainshow.com/abu-dhabi/
Evin is the CEO and Co-Founder of @billions_ntwk, the first universal human and AI network. Billions is focused on verifying both humans and AI agents, YC/AML status, location, age and reputation, without revealing sensitive data.
Her work spans early blockchain development, onchain identity, data standards and reputation technology. She has also contributed to initiatives using onchain reputation technology with global-scale brand events, festivals and connected media.
Previously, Evin founded Disco.xyz and served as a Director at Berkshire Hathaway and ConsenSys. She is also a cofounder of DAO Jones and inkDAO, an advisor to Boys Club and a graduate of Yale University.
We look forward to welcoming Evin to the Global Blockchain Show stage.
📍10-11 December 2026 | Abu Dhabi
🎟️Get your ticket: globalblockchainshow.com/abu-dhabi/
11
14
31
20,125
evin retweeted
If you’d like to meet our CEO Evin McMullen in December at the Global Blockchain Show in Abu Dhabi, this is your chance to say hi and find out how we’re building the trust layer for DeFi, agentic commerce, and the AI agent economy.
Tickets → globalblockchainshow.com/abu-dhabi/
Tickets → globalblockchainshow.com/abu-dhabi/
We’re pleased to welcome Evin McMullen (@provenauthority), as a featured speaker at the Global Blockchain Show, Abu Dhabi.
Evin is the CEO and Co-Founder of @billions_ntwk, the first universal human and AI network. Billions is focused on verifying both humans and AI agents, YC/AML status, location, age and reputation, without revealing sensitive data.
Her work spans early blockchain development, onchain identity, data standards and reputation technology. She has also contributed to initiatives using onchain reputation technology with global-scale brand events, festivals and connected media.
Previously, Evin founded Disco.xyz and served as a Director at Berkshire Hathaway and ConsenSys. She is also a cofounder of DAO Jones and inkDAO, an advisor to Boys Club and a graduate of Yale University.
We look forward to welcoming Evin to the Global Blockchain Show stage.
📍10-11 December 2026 | Abu Dhabi
🎟️Get your ticket: globalblockchainshow.com/abu-dhabi/
704
570
490
22,224
evin retweeted
🧵 An important article on @Cointelegraph highlighting KYC risks, in which I’m quoted, alongside Susie, Evin & Lyudmyla. Thread 👇
3
9
25
3,668
evin retweeted
A hacker emailed Revolut pretending to be a government agency and asked for customer records.
Revolut believed the email and handed over passport photos, driver's licences, selfies, addresses, and full transaction histories for 680 customers.
How could that happen?
Our explains on @Cointelegraph the Revolut breach, the broken system behind it that has affected over 343 million people, and what it means for anyone who wants AI to handle their money. cointelegraph.com/magazine/revol…
Revolut believed the email and handed over passport photos, driver's licences, selfies, addresses, and full transaction histories for 680 customers.
How could that happen?
Our explains on @Cointelegraph the Revolut breach, the broken system behind it that has affected over 343 million people, and what it means for anyone who wants AI to handle their money. cointelegraph.com/magazine/revol…
🚨 INSIGHT: The technology to verify identity without storing sensitive documents already exists. So why does KYC still depend on massive databases of personal data?
Read more:
ct.com/magazine/revol…
12
28
61
16,422
evin retweeted
KYC is framed as protection, but when identity data is required to use a service, the information collected for safety can later be used for extortion.
One of the points I made, quoted in @Cointelegraph was:
“We need to stop treating identity verification and surrendering your are the same thing.”
Revolut released identity files after requests were sent from a legitimate Italian law enforcement address. The piece looks at:
- what went wrong
- why collecting documents is not the same as proving a fact
- how we can verify without storing so much personal data
Efrat Fenigson of You’re The Voice warns: “When regulators keep mandating a model that guarantees this outcome, while the technology to verify without storing already exists, it raises a red flag.”
Lyudmyla Kozlovska of the Open Dialogue Foundation highlights another weakness: “EU AML law imposes no verification duty on the bank and provides no meaningful mechanism to check who is really behind an authenticated state request.”
Evin McMullen of Billions Network sums up the wider problem: “This is a governance and standards problem wearing a technology costume. You cannot lose what you never held.”
This is a really important piece from Christina Comben, bringing together the risks around how identity data is collected, stored and shared and the possible alternatives that already exist.
Read the full article here:
cointelegraph.com/magazine/revol…
One of the points I made, quoted in @Cointelegraph was:
“We need to stop treating identity verification and surrendering your are the same thing.”
Revolut released identity files after requests were sent from a legitimate Italian law enforcement address. The piece looks at:
- what went wrong
- why collecting documents is not the same as proving a fact
- how we can verify without storing so much personal data
Efrat Fenigson of You’re The Voice warns: “When regulators keep mandating a model that guarantees this outcome, while the technology to verify without storing already exists, it raises a red flag.”
Lyudmyla Kozlovska of the Open Dialogue Foundation highlights another weakness: “EU AML law imposes no verification duty on the bank and provides no meaningful mechanism to check who is really behind an authenticated state request.”
Evin McMullen of Billions Network sums up the wider problem: “This is a governance and standards problem wearing a technology costume. You cannot lose what you never held.”
This is a really important piece from Christina Comben, bringing together the risks around how identity data is collected, stored and shared and the possible alternatives that already exist.
Read the full article here:
cointelegraph.com/magazine/revol…
🚨 INSIGHT: The technology to verify identity without storing sensitive documents already exists. So why does KYC still depend on massive databases of personal data?
Read more:
ct.com/magazine/revol…
6
30
57
4,671
evin retweeted
Our CEO Evin McMullen (@provenauthority) explains why the stablecoin-based, neckless $1.5 trillion agentic economy needs verified, accountable identity... with bits and pieces from her chat with Brad and January from DeAI News Journal (@deainewsjournal). x.com/i/article/2097…
34
19
73
39,410
evin retweeted
Who's building the infrastructure for the agentic economy? We are talking to them! Ep.2 of DeAI News Journal we have @provenauthority(@billions_ntwk) on agent wallets and identity; Sit down interviews with @michaelh_0g (@0G_labs) & @ilblackdragon (@NEARProtocol) w/@Liqquidity
7
3
10
1,510
evin retweeted
Safety and privacy must go hand in hand. 🤝
In @observer, @provenauthority examines the cybersecurity risks of mandatory age verification—as a patchwork of laws drives adoption of the most invasive requirements.
Read more: observer.com/2026/08/age-ve…
In @observer, @provenauthority examines the cybersecurity risks of mandatory age verification—as a patchwork of laws drives adoption of the most invasive requirements.
Read more: observer.com/2026/08/age-ve…
0
3
3
575
evin retweeted
A new builder @billions_ntwk joins De¹ Lab!
Billions Network is the trust layer for agentic commerce, verifiable identity and reputation for humans and AI, with privacy-first zero-knowledge proofs at the core.
As AI agents take on more autonomy, this ensures the humans behind e and trustworthy.
Billions Network is the trust layer for agentic commerce, verifiable identity and reputation for humans and AI, with privacy-first zero-knowledge proofs at the core.
As AI agents take on more autonomy, this ensures the humans behind e and trustworthy.
8
6
30
7,143