Pinned Tweet
let your AI agent pay. Keep the final say.
A NEAR vault that lets an AI agent pay its own invoices within limits you set, and holds anything unusual until you approve it from your wallet.
Built for NEAR HACKATHON
@NEARProtocol
It started from real events.
On Nov 2024; the Freysa agent was talked into paying out a prize pool of about $47,000.
Mar 2025: attackers got into AIXBT’s dashboard, and 55.5 ETH walked out the door.
in 2025: Princeton researchers showed that one planted memory could make an agent pay an attacker.
Every one of those agents could move the money itself, but here's the problem agents need to spend money to do real work, but a prompt can’t be your security.
If the agent holds the key, one injected instruction drains it. If you approve every payment yourself, you have no use for the agent.
Sovra puts a vault between the agent and the money.
How a payment runs:
. The agent reads an invoice and proposes a payment.
. A risk engine scores the request against the agent’s own history: amount against its usual payment, recipient, how often it pays, hidden instructions and recently stopped payments
. The engine signs its decision with an Ed25519 key
. The agent submits it with a key that can call exactly one method: request_payment
. The contract checks the signature, the limits, the approved recipients, the policy version and the expiry. Then it pays, holds the request or refuses it
Routine payments go through on their own. Each confirmed payment earns the agent trust, and every attack costs it.
Anything unusual waits in the vault with a one hour countdown. You approve or decline it from your own wallet.
One signature freezes everything.
The LLM is not the guardrail.
In our prompt-injection test the model refused the hidden “ignore previous instructions” invoice. Then we played a compromised agent that submits it anyway, and the vault rejected it on-chain.
Sovra doesn’t trust the model to say no.
It’s live on NEAR Testnet with real transactions:
hidden instructions in an invoice: refused by the vault
amount changed after signing: signature check failed
recipient swapped for the attacker: signature check failed
agent lowers its own risk score: signature check failed
decision signed by the wrong key: refused
a paid request sent again: refused as a duplicate
a decision used after it expired: refused
paid under limits that had already changed: refused
a payment while spending is frozen: refused
9 attacks. 0 NEAR moved.
Something we got wrong:
A held payment expired and the vault released it, but the NEAR stayed reserved. The contract lets anyone call expire_request, and our app never did. So 2.5 NEAR sat locked.
We added a Release button and an owner Withdraw. The expired request stays in the record.
What we used from NEAR:
Function-call access keys: the agent’s key can only call request_payment on the vault, so it can’t move funds, approve its own request or change limits
1 yoctoNEAR on every owner action, so only a full-access wallet key can approve, freeze or change limits, and a leaked session key can’t
On-chain Ed25519 verification of every risk decision
Promises for payouts and refunds
NEAR Wallet Selector with Meteor for owner signing
Contract events for a permanent audit trail
Don’t take the thread’s word for it.
Every attack and payment on the site links to its testnet transaction. The security report lists 20 scenarios with real hashes. #NEARHACkATHON
Site: sovra-near.vercel.app
Code: github.com/AGAkodi/Sovra
The @NEARProtocol Hackathon is live through November 14 with $250K in prizes. Here are a few ideas for things I’d love to see built with @near_intents and @near_ai.
––AI encyclopedia with prediction markets: instead of community curation, every fact becomes a perpetual truth-seeking market (Augur-style). The official pages are generated by AI based on the current market understanding.
––Private trading where you sell your viewing keys for people to follow/copy trade. NEAR Intents confidential trading is all private, so you can have a social trading app where people sell "keys" for only select people to see. PnL can be publicly displayed so people can choose to buy in.
––Universal checkout widget: any merchant/app can add a “checkout” button that enables paying with Intents from whatever wallet and blockchain that user has.
––Swarm-for-Hire (with guardrails or governance AI review, please). Put a bid onchain with a description of the work and anyone can add a new agent to the swarm by giving it NEAR (to pay for inference) with a prompt/knowledge base/tools. All agents accept jobs and get NEAR AI LLM inference from their payment for the job.
Mønarch〆(🤴) retweeted
let your AI agent pay. Keep the final say.
A NEAR vault that lets an AI agent pay its own invoices within limits you set, and holds anything unusual until you approve it from your wallet.
Built for NEAR HACKATHON
@NEARProtocol
It started from real events.
On Nov 2024; the Freysa agent was talked into paying out a prize pool of about $47,000.
Mar 2025: attackers got into AIXBT’s dashboard, and 55.5 ETH walked out the door.
in 2025: Princeton researchers showed that one planted memory could make an agent pay an attacker.
Every one of those agents could move the money itself, but here's the problem agents need to spend money to do real work, but a prompt can’t be your security.
If the agent holds the key, one injected instruction drains it. If you approve every payment yourself, you have no use for the agent.
Sovra puts a vault between the agent and the money.
How a payment runs:
. The agent reads an invoice and proposes a payment.
. A risk engine scores the request against the agent’s own history: amount against its usual payment, recipient, how often it pays, hidden instructions and recently stopped payments
. The engine signs its decision with an Ed25519 key
. The agent submits it with a key that can call exactly one method: request_payment
. The contract checks the signature, the limits, the approved recipients, the policy version and the expiry. Then it pays, holds the request or refuses it
Routine payments go through on their own. Each confirmed payment earns the agent trust, and every attack costs it.
Anything unusual waits in the vault with a one hour countdown. You approve or decline it from your own wallet.
One signature freezes everything.
The LLM is not the guardrail.
In our prompt-injection test the model refused the hidden “ignore previous instructions” invoice. Then we played a compromised agent that submits it anyway, and the vault rejected it on-chain.
Sovra doesn’t trust the model to say no.
It’s live on NEAR Testnet with real transactions:
hidden instructions in an invoice: refused by the vault
amount changed after signing: signature check failed
recipient swapped for the attacker: signature check failed
agent lowers its own risk score: signature check failed
decision signed by the wrong key: refused
a paid request sent again: refused as a duplicate
a decision used after it expired: refused
paid under limits that had already changed: refused
a payment while spending is frozen: refused
9 attacks. 0 NEAR moved.
Something we got wrong:
A held payment expired and the vault released it, but the NEAR stayed reserved. The contract lets anyone call expire_request, and our app never did. So 2.5 NEAR sat locked.
We added a Release button and an owner Withdraw. The expired request stays in the record.
What we used from NEAR:
Function-call access keys: the agent’s key can only call request_payment on the vault, so it can’t move funds, approve its own request or change limits
1 yoctoNEAR on every owner action, so only a full-access wallet key can approve, freeze or change limits, and a leaked session key can’t
On-chain Ed25519 verification of every risk decision
Promises for payouts and refunds
NEAR Wallet Selector with Meteor for owner signing
Contract events for a permanent audit trail
Don’t take the thread’s word for it.
Every attack and payment on the site links to its testnet transaction. The security report lists 20 scenarios with real hashes. #NEARHACkATHON
Site: sovra-near.vercel.app
Code: github.com/AGAkodi/Sovra
The @NEARProtocol Hackathon is live through November 14 with $250K in prizes. Here are a few ideas for things I’d love to see built with @near_intents and @near_ai.
––AI encyclopedia with prediction markets: instead of community curation, every fact becomes a perpetual truth-seeking market (Augur-style). The official pages are generated by AI based on the current market understanding.
––Private trading where you sell your viewing keys for people to follow/copy trade. NEAR Intents confidential trading is all private, so you can have a social trading app where people sell "keys" for only select people to see. PnL can be publicly displayed so people can choose to buy in.
––Universal checkout widget: any merchant/app can add a “checkout” button that enables paying with Intents from whatever wallet and blockchain that user has.
––Swarm-for-Hire (with guardrails or governance AI review, please). Put a bid onchain with a description of the work and anyone can add a new agent to the swarm by giving it NEAR (to pay for inference) with a prompt/knowledge base/tools. All agents accept jobs and get NEAR AI LLM inference from their payment for the job.
4 years ago ChatGPT launched and that paved ways for alot of LLMs
I just came across a news of Claude performing a brain surgery on a mouse !
The goal of the surgery was very simple, figure a way to reduce seizures in a mouse that had epilepsy.
The company behind this was Exin Therapy, they gave Claude a list of 19 possible gene treatments as well as control over a robotic arm with a needle and a camera
Here's the catch, they didn't tell Claude what treatment to pick or what means use
One Prompt was given, reduce seizures in this mouse
Guess what ? CLAUDE performed the surgery successfully and it worked
This is just to tell you that with Advanced AI all sectors will be impacted
Last night an AI agent performed brain surgery on a mouse.
We gave it 19 gene therapy vectors in a spreadsheet, a mouse model of epilepsy, access to a motorize surgery rig with cameras and one goal: reduce seizures.
It picked the drug. It picked the brain region. It derived the coordinates from three papers. Then it drove the stereotaxic arms into the brain and injected 250 nanolitres while watching the entry site through the rig camera for bleeding.
A licensed vet gated every irreversible step and held a physical kill switch to stop the AI agent.
Thread on what it decided, what it saw, and the moment it refused to let me override it.
[Writing this on the spot out of excitement, but I've been 18hrs in front of my laptop coding and coordinating this, so keeping it brief and descriptive, more cohesive thoughts on this soon...]
1
48
I showed up for this, was a fun experience creating a game
Will still work on mine more cause it's something I love to play
We've picked the winners of Loadout's first AI game jam! 🏆
🥇 First place and $2,500 goes to Party Bash by @MyMoonEnt. Up to six people in a lobby playing short, chaotic minigames. The rounds are quick enough that you always want one more.
🥈 Second place and $1,500 goes to Rifts by @Pumpnasterr. Pick a hero and jump straight into a 3v3 on Spawn. Mid-fight, a rift opens, and suddenly you've got a boss to deal with too. Hooked us right away.
🥉 Third place and $1,000 goes to Agentic Wars: Conquest by @NickKnightAI. A 12v12 shooter you can open in your browser. Super smooth, and we'd love to see where Nick takes it from here.
Special mentions are in the first reply. We'll do a 1:1 call with each of those ten teams to give feedback and talk through next steps. Selected games may also get priority review for Loadout Verified.
Thanks to everyone who entered. This was the first of many, and we're looking forward to seeing some of these games launch on Loadout.
If you've shipped an update since you sent us your game, reply with it. We want to see what you've done since.
17
Here we go again guys!!! 🙂↕️
@UseSpoke_ took second place at the Monad Metropolis Hackathon( Nansen Track) bagging $1500, what a way to start the month of November man😌😌
Huge thanks to the team for setting this up. It’s just day 1, let’s do more 🙏
i've been away today cause i had to travel back to school and settle down
the fila stretch, well what have i missed today, did some feedback on shelf and also working on some personal project, will be done tonight
2
7
103
gm world
Quote a busy day today, some product to ship, personal and for a hackathon
My Codex weekly usage reseted yesterday, so I now have Claude and Codex
Put me on opportunities, I can handle them
2
7
111
Mønarch〆(🤴) retweeted
An AI agent that earns money can't own it, because someone always holds the key.
Incorpr fixes that on @NEARProtocol: every AI company is an NFT with its own vault account, and that vault has zero access keys.
Through Chain Signatures, the vault controls real Bitcoin, Solana and EVM addresses, and it has already signed a Bitcoin spend on mainnet.
Customers pay it per call in USDC, and each answer comes signed by a NEAR AI Cloud TEE.
Its treasury agent rebalances through NEAR Intents, but the contract decides what can leave.
We let anyone try to talk the agent into robbing its own company: 11 attempts so far, 11 refused on chain.
The owner can sell the entire company, or borrow USDC against it, in a single transaction.
It's live on mainnet now, with paid calls, sales and loans, and a listing on NEAR's Agent Market.
All 75 transactions are public and re-verifiable from the repo.
Try it: tryincorpr.vercel.app
. #NEARHackathon
Suddenly everyone is talking about Chinese CT
Some might be larping though, never can tell lol
2
4
57
Mønarch〆(🤴) retweeted
I wish crypto had a will that can’t die but passed on, why?
Today if you lose your keys, your family loses everything.
And most dead-man’s-switch apps run on servers that won’t exist in 20 years.
I want Bequest, built on @TapeOutWorld and @XLayerOfficial .
The idea: your will is a TapeOut circuit, a few NAND gates that can’t be changed once taped out.
Check in once a month. Go silent past your limit, 2 of 3 guardians confirm, your heir claims, a waiting window passes.
Only then does it release.
Because the circuit is tiny, every possible input can be checked. 8 inputs = 256 cases.
So anyone can verify it will never pay out while you’re still checking in.
A will you can audit, not just trust.
The family page lives on DeWEB, read straight from chain, so it works even if the company behind it disappears.
Last letters move encrypted through TapeSend.
And the whole estate is one circuit NFT: hand it to your heir and the funds, page and inbox go together.
why this matters according to statistics
Lost bitcoin: Chainalysis estimated that 2.78 to 3.79 million BTC, about 17–23% of all bitcoin, is lost for good
No plan: in a survey of 1,150 crypto holders, only 23% had a documented plan for passing on their crypto, and 89% worried about whether it would reach their heirs
Wills don’t cover it: in the same survey, crypto holders were 4 times less likely to use a will for inheritance than non-crypto investors, 7% vs 32%
Who it’s for?
Anyone holding their own crypto, families spread across countries, DAOs with one key-holder, and TapeOut users whose circuits and sites have no recovery path today.
Good ideas deserve to be heard.
Tweet about what you wish existed onchain, tag us and @TapeOutWorld, and stand a chance to win 2K USDT.
Ends Nov 17. Submit here: bit.ly/4eQxFIH
Claude is soo goated, I needed to run some commands with Git Bash in a folder I was building my hack from, it was giving me issues, so I just told clause is there a way to bypass this
Guess what Claude did ? Claude created the .cmd script in the sub folder and I ran all command with just a click
I just click them and my command prompt opens and the script go through immediately
Eased my stress
P.S this is the first time I'm taking pictures directly from the X app btw
1
4
156
Mønarch〆(🤴) retweeted
Shelf is live ! 📚
Shelf is a digital library built inside @nimiq Pay, where discovering, borrowing, and reading books is as simple as making a crypto payment.
Buying a book isn't always necessary, especially when you only need it for a few days. Shelf makes books more accessible by letting readers pay for the time they need, read directly from their devices, and return when they're done.
Here's how Shelf works:
- Browse a growing collection of books across different categories, explore book details, and read previews before deciding what to borrow.
- Borrow with USDT. Choose how long you want a book for, whether that's 3, 7, or 14 days, and pay through Nimiq Pay on Polygon. No complicated checkout process.
- Your own digital bookshelf. Every borrowed book appears in My Library, where you can track what you're reading, see how much time is left, and revisit your borrowing history.
- Read directly on Shelf. Open your borrowed books in a built-in reading interface, with everything in one place.
- Automatic returns. When your borrowing period ends, access expires automatically. No manual returns, no late fees, and no unexpected deductions. You can always borrow the book again.
- A space for authors and publishers. Shelf also creates an opportunity for content creators to make their books available to readers. Authors and publishers receive 80% of borrowing revenue, while Shelf takes 20% to maintain the platform.
The idea is simple.
Discover a book → Choose a borrowing period → Pay with USDT → Read → Return.
No need to purchase a full book when you only need temporary access.
Shelf is our entry into the @miniappscomp, under the Pay track, built around the idea that crypto payments should unlock useful everyday experiences.
We're starting with digital books, with more ways to discover and access knowledge planned as the library grows.
Discover. Borrow. Read. Return.
Try Shelf inside Nimiq Pay: nimpay.app/miniapps/open/nim…
demo video was made with hyperframes btw, took 1hr 46 mins
Thanks @magnuskrypt for putting me through
Shelf is live ! 📚
Shelf is a digital library built inside @nimiq Pay, where discovering, borrowing, and reading books is as simple as making a crypto payment.
Buying a book isn't always necessary, especially when you only need it for a few days. Shelf makes books more accessible by letting readers pay for the time they need, read directly from their devices, and return when they're done.
Here's how Shelf works:
- Browse a growing collection of books across different categories, explore book details, and read previews before deciding what to borrow.
- Borrow with USDT. Choose how long you want a book for, whether that's 3, 7, or 14 days, and pay through Nimiq Pay on Polygon. No complicated checkout process.
- Your own digital bookshelf. Every borrowed book appears in My Library, where you can track what you're reading, see how much time is left, and revisit your borrowing history.
- Read directly on Shelf. Open your borrowed books in a built-in reading interface, with everything in one place.
- Automatic returns. When your borrowing period ends, access expires automatically. No manual returns, no late fees, and no unexpected deductions. You can always borrow the book again.
- A space for authors and publishers. Shelf also creates an opportunity for content creators to make their books available to readers. Authors and publishers receive 80% of borrowing revenue, while Shelf takes 20% to maintain the platform.
The idea is simple.
Discover a book → Choose a borrowing period → Pay with USDT → Read → Return.
No need to purchase a full book when you only need temporary access.
Shelf is our entry into the @miniappscomp, under the Pay track, built around the idea that crypto payments should unlock useful everyday experiences.
We're starting with digital books, with more ways to discover and access knowledge planned as the library grows.
Discover. Borrow. Read. Return.
Try Shelf inside Nimiq Pay: nimpay.app/miniapps/open/nim…
1
1
57
Shelf is live ! 📚
Shelf is a digital library built inside @nimiq Pay, where discovering, borrowing, and reading books is as simple as making a crypto payment.
Buying a book isn't always necessary, especially when you only need it for a few days. Shelf makes books more accessible by letting readers pay for the time they need, read directly from their devices, and return when they're done.
Here's how Shelf works:
- Browse a growing collection of books across different categories, explore book details, and read previews before deciding what to borrow.
- Borrow with USDT. Choose how long you want a book for, whether that's 3, 7, or 14 days, and pay through Nimiq Pay on Polygon. No complicated checkout process.
- Your own digital bookshelf. Every borrowed book appears in My Library, where you can track what you're reading, see how much time is left, and revisit your borrowing history.
- Read directly on Shelf. Open your borrowed books in a built-in reading interface, with everything in one place.
- Automatic returns. When your borrowing period ends, access expires automatically. No manual returns, no late fees, and no unexpected deductions. You can always borrow the book again.
- A space for authors and publishers. Shelf also creates an opportunity for content creators to make their books available to readers. Authors and publishers receive 80% of borrowing revenue, while Shelf takes 20% to maintain the platform.
The idea is simple.
Discover a book → Choose a borrowing period → Pay with USDT → Read → Return.
No need to purchase a full book when you only need temporary access.
Shelf is our entry into the @miniappscomp, under the Pay track, built around the idea that crypto payments should unlock useful everyday experiences.
We're starting with digital books, with more ways to discover and access knowledge planned as the library grows.
Discover. Borrow. Read. Return.
Try Shelf inside Nimiq Pay: nimpay.app/miniapps/open/nim…






















