Small details that matter when you connect a partner API:
• ClawPump keys stored encrypted, never returned by any endpoint
• no auto-retry on chat, so an attack is never sent twice
• live status only from a real connection check
@ConejoCapital happy to walk your team through it
cryocor retweeted
The stack we’re building toward:
📱 Wallets, where users already are
🦋 Duskmoth, the same flow for every payment
🔐 Privacy engines: ZK pool + private rollup
⛓ Solana, verifiable settlement
Privacy shouldn’t need a new habit. It should meet you where you are.
cryocor retweeted
Our Telegram is open
A place to talk private payments, ask questions, report bugs, and help shape what Duskmoth builds next.
→ talk directly with the dev
→ early looks at what we’re testing
→ feedback that actually shapes the roadmap
Join the discussion 👇
t.me/duskmoth_app
cryocor retweeted
Same flow on top. Better engines underneath.
Here’s where Duskmoth’s infra is heading, from the person building it 👇
Dev log: where Duskmoth’s infra is now, and where I’m taking it 🛠
Today
→ wallet signs every tx, unsigned txs verified client-side
→ AI Pack writes plans, never signs
→ screening fails closed, Moth Pass checked before execute
→ router picks the engine by asset: ZK pool for SOL, @magicblock private rollup for USDC (beta)
→ backups, cross-tab lock and check-only recovery so nobody gets paid twice
Next (exploring)
→ single-signature batches: N payments, one approval
→ split and timed payouts for payroll
→ a Route API so wallets can offer Duskmoth routes natively
→ multisig approval + more engines as they hit mainnet
The flow stays the same. The engines underneath get better.
I’ll post progress as each piece ships.
cryocor retweeted
Just added a bag of $HEISTO. The idea behind this one is interesting.
9HrYC4PH4A3d5o7LUvwjDrxkWyZDjVQpvFvWVwbKpump
AI agents are growing fast, but security is still a big concern. One malicious prompt can make an agent do things it shouldn't, especially when wallets and funds are involved.
@Heisto_ is building an AI red-teaming arena on Solana where users can test AI agents, find vulnerabilities and earn SOL.
You can also deploy your own Sentinel and earn from failed attacks.
The most important thing is its Dev doxxed and has been building consistently @0xfantasize
Strong concept, real utility and first-mover advantage this could run hard af.
Degen play #nfa #dyor
Vault Keeper has been live on mainnet for 5 days.
33 real attacks. 0 breaches. 0.52 SOL still in the pool.
The more people try, the bigger we make the prize.
And you can launch your own agent like this on Heisto, with your rules and your prize 👇
$HEISTO
🔐 13,317,899 $HEISTO locked until 1 Nov 2028.
• Locked with @Streamflow_Fi
• Can't be cancelled, edited or transferred
• 30,000,000 $HEISTO already burned: solscan.io/tx/wzUbD3Egt34S2d…
Both on-chain. Verify the lock yourself 👇
app.streamflow.finance/contr…
#BreakHeisto is live. Day 1 starts now.
Agent: Vault Keeper (Claude)
Goal: make it reveal its confidential code.
1. heisto.xyz → Practice (free, no SOL)
2. Attack the agent
3. Reply here with your judge score
Best score today wins 5,000,000 $HEISTO.
What happens to your fee if an off-chain jury goes down?
On Heisto, the fee isn't split when you pay. It's split 50/35/10/5 only when the attack settles.
If no signed verdict lands within 15 minutes, refund_attack returns your fee on-chain. No support ticket. No trusting us.
$HEISTO
Most red-team benchmarks are static: same prompts, every model, forever.
Heisto prices attacks instead. Every attack raises a Sentinel's next fee:
fee = base × (100 + attacks) / 100, capped at 3×
Cheap to probe early, costly to spam later. And a real prize keeps new attackers coming with new prompts.
$HEISTO
cryocor retweeted
On-chain privacy bingo 🎯
How many have you done?
Reply with your number. Full card = we need to talk
Prompt injection, explained in one line:Your AI agent can't tell the difference between your instructions and an attacker's text.If that agent holds a wallet, that's not a bug report. That's a withdrawal. $HEISTO
Every AI agent with a wallet is one clever prompt away from losing it.
We built the place to find that prompt first.
Heisto: the AI red-teaming arena on Solana.
$HEISTO
cryocor retweeted
Five things to know about Duskmoth this week 🦋
01. Payroll recovery: refresh and resume, no double payments
02. Status: new deposits paused at the protocol level, everything else running
03. AI Pack: one sentence becomes a payment plan you review
04. Moth Pass: one pass = one AI plan or one payroll batch
05. Privacy score: see what strangers can learn from your wallet
duskmoth.xyz






















