Hilgi

Tesla is celebrating Halloween this year by having a Cybercab autonomously drive around Austin with skeletons inside haha 🎃

$2.5B just left a Binance wallet in one transaction. @MehowHacks put out a video on what we’re actually doing about it: zero-knowledge proof of seed provenance. The idea is simple. Before a protocol lets funds out, the wallet proves, in ~3 seconds, without revealing your seed, that the withdrawal address and the deposit address belong to the same owner. Or as he puts it: the thief has to show up to the bank with the bags of money they’re about to steal.

Introducing FortressID™, with @Sumsub. Proving who you are in crypto means starting over every time. Each exchange, app and counterparty runs its own check and keeps its own copy. Meanwhile, person to person, there is no check at all: a payment from a stranger's address says nothing about who sent it, and scams took an estimated $17B in 2025 with impersonation up 1,400% year on year. FortressID™ moves identity from the company's database to the person's name. Every paid FortressName™ will include one Sumsub identity verification at no extra cost. FortressID™ answers one question for the person paying you: has this person passed an identity check? Are they human or a robot? The answer stays with you until you decide to share. Read more in @ThePaypers, link below.

In 2020 we looked at where crypto privacy was heading and didn't like what we were seeing. Every serious attempt was a mixer or a coin that hid everything from everyone, and anyone paying attention could see regulators would eventually ban that. They have. From July 2027 an EU exchange can't hold an account that anonymises transactions. Dubai got there first. But the thing people actually wanted was never anonymity. A company doesn't want its suppliers and payroll readable by competitors. A person doesn't want to hand over their entire financial history every time they share an address. That's privacy from strangers, and it's completely compatible with the two parties in a payment knowing exactly who each other is. So that's what we built. You send to a name instead of an address. The name produces a fresh destination for every relationship you have, on every chain it runs on, and one encrypted signal covers years of payments between you. Nobody reading the chain can tell who you pay. Your recipient always can. Then we went further than anyone asked us to. Every payment can carry a zero-knowledge proof of where the money came from. Only the recipient can read it, and they can show it to an auditor later without exposing anything else. A bridge can demand that proof before it pays out, which means a swapped or poisoned address simply can't collect. The same proof system turned out to make existing wallets quantum safe without moving a coin, and this summer we got proving time down from over half an hour to a few seconds. $AF is the token that makes the network run. It locks name reservations, pays the people who carry the signals, and covers the tolls for resolving names and sponsoring transactions. Five years, one million lines of code and sixteen patents filing later, we’re here.

today we're releasing apex-flash-1, our first open-weights model for security research post-trained on real vulnerabilities we found and got paid for. we are also releasing the abliterated variant for researchers who want fewer refusals in their own authorized workflows. how we built it: cantina.security/apex-flash