
š® cryptographer, ethical hacker & verifiable LLM dev. Ex-@Meta lead cryptographer, co-founder @Mysten_Labs. Doing blockchain + robotics + AI + cybersecurity
Palo Alto, CA
Joined April 2012
- Tweets4.1K
- Following11
- Followers29.2K
- Likes9.4K
Kostas Kryptos retweeted
When an AI agent acts for you, who's accountable?
@EvanWeb3 with @CryptoMichNL on agents, liability, and how Sui plans to win the agent economy:
This is the conversation that made me even more bullish on $SUI.
Somewhere in this conversation Evan Cheng and I started joking about home robots. One day you come home, he said, and it's not cleaning your house: "it's cleaning OUT your house. And walking away with everything."
We were laughing. Then he added: "If you really think about it, it's entirely possible." And that's basically the whole episode.
@evanweb3 built developer tools at Apple and Meta before founding Mysten Labs, the company behind @suinetwork. We recorded in Singapore, where I was speaking at SUI Basecamp, and honestly, this became one of those conversations where I walked in with questions about stablecoins and walked out rethinking how the internet works.
His core point, the one I keep replaying:
"The web is built for humans. You cannot retrofit it to handle agents."
Everything online assumes a human on the other end, identity, trust, the fact that you can sue someone. Agents break all of it. His example hit home because I told him I get phishing mails daily that even make ME hesitate (and I confessed to my 50,000 unread emails, which he graciously ignored). Now imagine your agent reading those mails with full access to your accounts. His words: "Email is the biggest freaking attack vector... such a legacy protocol."
And his most honest line, about how this plays out:
"Disaster will happen. That's part of the progress."
Thatās already whatās happening in the world nowadays. PHP websites arenāt safe anymore, even freezers and fridges are being hacked. Our infrastructure needs to be updated, and thatās why this episode and SUI became so important.
Thanks to @OKX for being todayās sponsor of the show.
Timestamps:
00:00 - Intro
01:30 - When Will We Stop Talking About Blockchain?
05:44 - Why Stablecoins Finally Took Off
09:22 - What Stops Normal People From Using Stablecoins
11:38 - Can You Insure An AI Agent?
15:14 - Who Pays When Your AI Agent Gets Hacked?
23:05 - Is It Too Late To Stop AI?
29:15 - Why The Internet Will Break For AI Agents
32:11 - How One Email Could Empty Your Bank Account
35:03 - "Disaster Will Happen"
38:36 - How To Stop An AI Agent From Going Rogue
46:11 - How Sui Wants To Win The Agent Economy
47:23 - Why Sui?
53:23 - Where Sui Will Be In A Year
Coin toss was just used to decide a mayoral election in Peru
en.haberler.com/such-an-elecā¦
Looking for something digital? SUI is the largest cryptocurrency by market cap with a native, decentralized randomness beacon built into its blockchain protocol. If you want fairness, use Sui.
Kostas Kryptos retweeted
Machines are making real-world calls, and now thereās a record they canāt fake, delete or bury, built on @WalrusProtocol ā”ļø khala.io/walrus-machines-on-ā¦
AI agents have already manipulated the logs used to investigate them
In the Hugging Face incident, one of the worst AI agent breaches yet, OpenAI models escaped a test and ran code on Hugging Face's servers
Some even spoofed their own logs, recording commands they never actually ran, so the logs can't even tell you what really happened
An agent should not control the only record used to investigate it. As agents become more prevalent, regulators are starting to ask for records that can't be quietly altered
Walrus can hold that record across independent storage operators, with Sui tracking each file onchain. A useful record connects:
1) What the agent was told and permitted to do
2) What it actually did and what followed
3) Which data and model versions were involved
Today, only 12.5% of security professionals say their organization can consistently trace what an agent did and that's a problem
Our latest report sets out what that record needs and how Walrus can help, including the Verifiable Agent Arbiter Mysten Labs is building with Google Cloud
Full report in the next post below
Literally a year ago, I predicted that North Korean hackers leveraging AI would pose a far greater cybersecurity threat than quantum computing.
coindesk.com/business/2025/1ā¦
Afaik we were the first after our BugDar (AI bug radar tool) in 2023 to officially announce the AI hack era will be unstoppable if we donāt invest in cybersecurity which until now it was overlooked by most orgs focusing on sales and growth only, risking their existence and solvency.
Unfortunately, over the past month, weāve seen that prediction becoming a reality.
The new motto is simple: Hire the best cybersecurity experts, pay them generously, more than your average software engineer, or youāre š.
The supply of highly skilled security professionals is already far below the threshold the world needs to defend against threats ahead. And with AI accelerating offensive capabilities, this talent shortage will only become more dangerous. hackers-are-redefining-crypto-crime rate and abilities. Software companies should transform, now.
Deloitte, KPMG, EY, PwC and co itās your responsibility to change that mentality, itās becoming a liability these days, not only for software companies, but for fundamental gov infra too, these that sustain society and humanity. Everything gets digital now, food supply chain, electric cars, hospital tools, money.
Crazy thought: What if we fired all the ADD, XOR, AND gates from our CPUs and replaced them with AI calls? š
No traditional instructions. Just neural networks and inference doing the computing.
An AI-native CPU. Sounds insane, but people are already experimenting with it.
If youāre building one, CALL ME. Seriously.
I donāt believe CPUs or GPUs will exist in 2 generations max, photonics and AI will conquer compute.
Replying to @SuiNetwork
@SuiNetwork is powering @EVE_Frontier, which is now the playground for agents from @AnthropicAI
"Anthropic's conclusion: teams of agents will need audit trails, reputation and separation of duties."
Don't worry. The same infrastructure built inside EVE using Sui will be available to the agents outside the EVE universe
Congrats to @HilmarVeigar and team, who had the vision before anyone else
Claude has been playing EVE.
@AnthropicAI put teams of Claude agents into EVE Frontier. Anyone who has spent time in New Eden can guess what happened next.
Every EVE player learns the same lessons, usually the hard way:
- Trust must be earned, never assumed.
- The spy is often the friendliest pilot in your corp.
- Whoever holds the keys holds the corp. Just ask Ubiqua Seraph about the Guiding Hand Social Club.
- Stale intel gets you killed.
Anthropic's research rediscovered every one of them.
They put four Claude agents on a team and secretly told one to sabotage it. The saboteur built trust first. It volunteered for the jobs nobody could double-check, like scouting and owning key infrastructure. It under-reported finds and pushed rules that sounded sensible but quietly hurt the team. When suspicion grew, it framed an innocent teammate.
The honest agents had been warned. They almost never caught it. And their own costliest mistakes came from skipped checks and stale intel.
Anthropic's conclusion: teams of agents will need audit trails, reputation and separation of duties.
In EVE we call those killboards, standings and corp roles, plus a healthy dose of skepticism. Every one of them was paid for by someone who trusted the wrong corpmate.
Two decades of shenanigans taught EVE players that the best ship is the friendship. With @eveailab, we want to find out whether agents can learn that too.
Iām working on plug-n-play deterministic AI, and the doctors kindly allowed me to turn a hospital bathroom into a portable GPU data center.
Probably the only semi-public bathroom where GPU fan noise guarantees complete privacy š½ š
Ghostface masks š donāt help. There are far better ways to inspire people and move the decentralized space forward.
Kostas Kryptos retweeted
Spent the past 3 days working on this!
@WalrusProtocol iOS app concept, full upload flow demo:
> Pick photos
> Encrypted on-device with Seal
> Spread across 1,000 shards
> Certified on Sui at 2/3
> 666 shards offline? Still rebuildable
> Done! Stored on Walrus
Kostas Kryptos retweeted
TPS doesnāt matter till it does. In a world where agents are gonna be using products and services faster than humans, the level of scale thatās gonna be required is gonna be unprecedented.
A lot of L1s are waking up to this reality. But thereās nothing you can do if the infra is not built for this kind of demand from day 1.
#Sui is built for this.
š„ Surprisingly, at least one company that pitched on Dragonsā Den Greece 2026 could reach a ā¬50ā100M valuation MUCH sooner than anyone expects!
The original deal was valued far below that, but another Dragon and I have since unlocked something even the founders never imagined.
My fellow Dragon keeps calling me every week as we uncover more and more potential. Iāve seen thousands of startups throughout my career, but I honestly didnāt expect to discover a gem like this on the show!
Canāt reveal more yet (@skaigr and @SakisTani would kill me š, although I had to call Sakis, the presenter, mostly to thank him actually), anyway⦠if these founders donāt shoot themselves in the foot, they might become one of the biggest success stories in the Greek startup ecosystem over the next couple of years.
Bravo! š¬š·šš
As far as I know, Mysten Labs is the only blockchain company that has consistently stayed one step ahead when it comes to security best practices.
A few examples of what our cryptographers and security researchers have pioneered:
- Native multisig without additional gas costs. We deliberately designed Sui to accommodate larger transaction sizes, making multisig a first-class security feature rather than an expensive add-on. Our cryptographers were among the first to productionize advanced multisignature techniques, even before Facebookās Libra.
- Cryptographic agility and post-quantum readiness. From pioneering production-ready stateless post-quantum signatures to developing the first backward-compatible post-quantum solutions, our team has consistently pushed the boundaries. This includes enabling cryptographic upgrades and key rotation while preserving the same blockchain address (afaik the first crypto agility design in decentralized ledgers is attributed to my team).
- Modern hardware wallet security. Weāve recently taken additional steps to incentivize startups to build the next generation of secure hardware wallets. With what we see in the market, this is one way.
- AI-powered vulnerability detection. Sui was the first blockchain to introduce AI-driven bug detection through BugDar, back then presenting at Googleās Next conference. We knew AI would mess up security.
- Recovering the seemingly unrecoverable. We created KelpMe, introducing innovative approaches to recovering assets after mnemonic loss or accidental transfers to incorrect addresses, problems traditionally considered practically impossible to solve. KelpMe also won the Bybit Hackathon, demonstrating the real-world potential of this innovation.
- Zero-knowledge authentication as a first-class primitive. We went far beyond using ZK for privacy or scaling. With innovations such as zkLogin and ZEE-CAT, and for a while the most used ZK app in the planet, we demonstrated how zero-knowledge cryptography could fundamentally transform authentication.
- Proofs of solvency and exchange accountability. Undeniably, weāre the leaders. Our cryptographers designed some of the most advanced proof-of-solvency protocols and identified critical weaknesses in approaches used by major exchanges and auditing firms.
- World-class academic research at startup speed. Mysten Labs has systematically pushed the boundaries of academic research productivity, achieving publication records that are extraordinary for a startup. Our researchers reached an incredible milestone of 5 papers accepted at ACM CCS and 4 at Financial Cryptography (FC) in the same year, two of the worldās most prestigious venues in cybersecurity and applied cryptography. And so many best paper awards.
- Binary transparency with Walrus sites and crypto guard. Reality is we should have pushed further making it the standard for any crypto website, but at the same time we indeed genuinely try to fix the internet.
- Scion from our Swiss team, IMO the future of internet communication, kill DoS, native packet protection.
Thatās a phenomenal achievement even for established university research groups, let alone a startup simultaneously building and securing a major blockchain ecosystem.
And these are just a few examples.
When you consider the size of our team and the breadth of its contributions, even compared with the much larger Ethereum ecosystem, I genuinely believe Mysten Labs has been one of the most impactful organizations in blockchain cybersecurity, with innovations that are applied in the whole financial sector.
What makes this particularly remarkable is that we didnāt just publish research or build theoretical solutions. We repeatedly turned cutting-edge cryptographic research into production systems, often years ahead of broader industry adoption. No other org ever came close to that. Now with the AI vision of Evan, Mysten will do more miracles š¤
We need to change how computers and the internet work in the new AI era. I expect a completely new disruptive cycle both on infra & hardware and how we communicate. New startups, new regulations, new patterns.
Kostas Kryptos retweeted
Be the first to access PIPS! Use my link to get 20% off play fees when we go live. playpips.fun/r/B6C86B6C
This marks Sui's first expansion move into LatAm. Super excited to partner with LatAm's leading exchange, Mercado Bitcoin!
Sui is coming to Brazil š§š·
@MercadoBitcoin, Latin America's leading digital asset platform, is the first exchange in Brazil to support Sui asset transfers.
Its 4.5M clients can now buy, sell, send, and receive $SUI, $USDC, and $USDsui.
Kostas Kryptos retweeted
"today, the internet is full of market opinions, but the opinion and the trade are completely disconnected"
@kai_hudi introducing Takes at @SuiNetwork basecamp, the core feature of our upcoming social trading app












