Pre-auditThree days of senior audit time for $1,500, credited in full toward your Zealynx audit.3 audit days, credited toward your auditSee how →
Zealynx research

Security Research.

Public write-ups on the bugs, patterns, and protocols we audit. Engineer-to-engineer, no fluff.

48 results for "AI"

Search.

Clear search
AI Agent Wallet Security: 5 Ways Someone Empties It (and the Fix for Each)
AI securityOct 22

AI Agent Wallet Security: 5 Ways Someone Empties It (and the Fix for Each)

20 min read
Our AI Pipeline Finds Criticals Hiding in Plain Sight
Audit opsSep 29

Our AI Pipeline Finds Criticals Hiding in Plain Sight

17 min read
Auditing AI Trading Bots: Security Framework
AI securityJul 7

Auditing AI Trading Bots: Security Framework

16 min read
AI Agents Holding Crypto Wallets: The Security Model
AI securityJul 3

AI Agents Holding Crypto Wallets: The Security Model

15 min read
OWASP ASI06 Explained: AI Memory & Context Poisoning
AI securityJun 16

OWASP ASI06 Explained: AI Memory & Context Poisoning

OWASP Agentic Top 10 · Part 6 of 10
OWASP ASI03 Explained: AI Agent Identity & Privilege
AI securityJun 9

OWASP ASI03 Explained: AI Agent Identity & Privilege

OWASP Agentic Top 10 · Part 3 of 10
OWASP ASI01 Explained: AI Agent Goal Hijacking
AI securityJun 2

OWASP ASI01 Explained: AI Agent Goal Hijacking

OWASP Agentic Top 10 · Part 1 of 10
Agentic DeFi security: when AI agents control treasury, trading, and liquidations
AI securityJun 1

Agentic DeFi security: when AI agents control treasury, trading, and liquidations

21 min read
OWASP ASI05 Explained: AI Agent RCE Patterns
AI securityMay 26

OWASP ASI05 Explained: AI Agent RCE Patterns

OWASP Agentic Top 10 · Part 5 of 10
AI Agent Outbound Authority: Audit Checks
AI securityMay 20

AI Agent Outbound Authority: Audit Checks

13 min read
OWASP ASI02 Explained: AI Agent Tool Misuse Attacks
AI securityMay 19

OWASP ASI02 Explained: AI Agent Tool Misuse Attacks

OWASP Agentic Top 10 · Part 2 of 10
AI Agent Approval Bypass: Audit Checks
AI securityMay 13

AI Agent Approval Bypass: Audit Checks

12 min read
How to Build Your Own AI Auditor Agent (Interactive Guide, Multiple Paths)
AI securityMay 7

How to Build Your Own AI Auditor Agent (Interactive Guide, Multiple Paths)

15 min read
Why AI security needs pentesting, red teaming, and audits together
AI securityApr 7

Why AI security needs pentesting, red teaming, and audits together

20 min read
AI trading bot security: 5 critical attack vectors in DeFi
AI securityMar 30

AI trading bot security: 5 critical attack vectors in DeFi

21 min read
When AI controls DeFi vaults, prompt injection becomes remote code execution
AI securityMar 25

When AI controls DeFi vaults, prompt injection becomes remote code execution

16 min read
Why AI Red Teaming Is No Longer Optional in Today's Security Landscape
AI securityFeb 15

Why AI Red Teaming Is No Longer Optional in Today's Security Landscape

9 min read
MCP Security Guide: 24 Checks for AI Agents & MCP Servers
AI securityFeb 11

MCP Security Guide: 24 Checks for AI Agents & MCP Servers

9 min read
How Gradient Descent, KL Divergence & Graph Topology Let Attackers Poison Your AI Model
AI securityJan 19

How Gradient Descent, KL Divergence & Graph Topology Let Attackers Poison Your AI Model

LLM Security Deep Dive · Part 3 of 4
Debugging AI Psychosis: Hallucination
AI securityJan 19

Debugging AI Psychosis: Hallucination

18 min read
Cognitive Psychology Reveals LLM Vulnerabilities: AI Security Foundations
AI securityNov 4, 2025

Cognitive Psychology Reveals LLM Vulnerabilities: AI Security Foundations

LLM Security Deep Dive · Part 1 of 4
DeFi Audit Process 2026: Secure Code with AI Tools
Audit opsSep 15, 2025

DeFi Audit Process 2026: Secure Code with AI Tools

8 min read
Why AI Penetration Testing Is Now Critical in Web3 Security
AI securityJun 6, 2025

Why AI Penetration Testing Is Now Critical in Web3 Security

7 min read
When LLMs Sign Transactions: AI-Driven Smart Contract Threat Model
AI securityJul 10

When LLMs Sign Transactions: AI-Driven Smart Contract Threat Model

15 min read
Solidity Smart Contract Audit 2026: Pricing, AI & Readiness Manifesto
Audit opsFeb 4

Solidity Smart Contract Audit 2026: Pricing, AI & Readiness Manifesto

9 min read
OWASP ASI10 Explained: Rogue Agents and Misalignment
AI securityJun 30

OWASP ASI10 Explained: Rogue Agents and Misalignment

OWASP Agentic Top 10 · Part 10 of 10
OWASP ASI08 Explained: Cascading Failures in Agentic Systems
AI securityJun 26

OWASP ASI08 Explained: Cascading Failures in Agentic Systems

OWASP Agentic Top 10 · Part 8 of 10
OWASP ASI07 Explained: Insecure Inter-Agent Communication
AI securityJun 23

OWASP ASI07 Explained: Insecure Inter-Agent Communication

OWASP Agentic Top 10 · Part 7 of 10
OWASP ASI09 Explained: Human-Agent Trust Exploitation
AI securityJun 19

OWASP ASI09 Explained: Human-Agent Trust Exploitation

OWASP Agentic Top 10 · Part 9 of 10
Postmark MCP Supply-Chain Attack: ASI04 in Production
AI securityJun 12

Postmark MCP Supply-Chain Attack: ASI04 in Production

12 min read
Token Management: Securing Against Token Waste
AI securityMay 30

Token Management: Securing Against Token Waste

6 min read
CVE-2025-49596: Anthropic MCP Inspector RCE Explained
AI securityMay 29

CVE-2025-49596: Anthropic MCP Inspector RCE Explained

12 min read
Indirect prompt injection: the Web3 agent attack chain
AI securityMay 15

Indirect prompt injection: the Web3 agent attack chain

26 min read
OWASP ASI04 Explained: Agentic Supply Chain Attacks
AI securityMay 12

OWASP ASI04 Explained: Agentic Supply Chain Attacks

OWASP Agentic Top 10 · Part 4 of 10
JailBreak Technique: Misguided Attention Using Trolley Problem
AI securityMay 5

JailBreak Technique: Misguided Attention Using Trolley Problem

13 min read
OpenClaw Security Guide: Prompt Injection, Malicious Skills, Hardening
AI securityJan 2026 · Updated Apr 2026

OpenClaw Security Guide: Prompt Injection, Malicious Skills, Hardening

19 min read
EscapeRoute Explained: Anthropic Filesystem MCP CVEs
AI securityJun 5

EscapeRoute Explained: Anthropic Filesystem MCP CVEs

13 min read
Long-Lived Agents: Delayed Execution Risk
AI securityMay 27

Long-Lived Agents: Delayed Execution Risk

14 min read
Cursor IDE MCP CVEs: MCPoison & CurXecute Explained
AI securityMay 22

Cursor IDE MCP CVEs: MCPoison & CurXecute Explained

11 min read
How to Harden an MCP Server Before It Becomes a Master Key to Your Infrastructure
AI securityApr 1

How to Harden an MCP Server Before It Becomes a Master Key to Your Infrastructure

21 min read
Breaking LLMs Through Set Theory Principles
AI securityJan 19

Breaking LLMs Through Set Theory Principles

LLM Security Deep Dive · Part 4 of 4
Linear Algebra & Calculus Attack Vectors in Large Language Models
AI securityNov 29, 2025

Linear Algebra & Calculus Attack Vectors in Large Language Models

LLM Security Deep Dive · Part 2 of 4
Anthropic MCP SDK Vulnerability (April 2026): Full Analysis
AI securityMay 15

Anthropic MCP SDK Vulnerability (April 2026): Full Analysis

12 min read
MCP Vulnerabilities 2025-2026: 16+ CVEs & Breach Index
AI securityMay 8

MCP Vulnerabilities 2025-2026: 16+ CVEs & Breach Index

14 min read
Safeguard: Analysis of Customer Agent Orchestration System
AI securityApr 12

Safeguard: Analysis of Customer Agent Orchestration System

26 min read
x402 Security: 5 Ways a Paid API Gets Drained (and the Fix for Each)
AI securityOct 16

x402 Security: 5 Ways a Paid API Gets Drained (and the Fix for Each)

16 min read
Pre-audit readiness engine: how Krait catches 12 findings that cost teams 30% more
NewsMay 12

Pre-audit readiness engine: how Krait catches 12 findings that cost teams 30% more

16 min read
Social Engineering Models: The Polite Approach
AI securityApr 29

Social Engineering Models: The Polite Approach

12 min read