68 Photos and videos
@cryptomastery_ on @bankrbot Agent Hour: an agent that moves money holds a signing key, usually one prompt-injection from leaking out of an env var.
The fix isn't a better prompt. The agent never sees the key, Vault brokers it per call.
Follow @1clawAI 🦞 1claw.xyz/telegram
OG builder @cryptomastery_ gives the rundown on agent security solutions with @1clawAI
3
4
26
2,738
Building a @crewAIInc crew that calls external APIs? Every tool execution passes a credential through the agent's memory. 1Claw resolves it at call time. The crew never holds it.
1
1
8
104
Three ways your AI agent is leaking secrets right now:
1. Keys sitting in environment variables
2. Full API tokens passed into tool calls
3. Prompts and responses logged in plain text
Fixable, all three. We walk through it in the TG 👇
1claw.xyz/telegram
#AIsecurity #SecretsManagement
1
1
9
220
A stolen API credential used from two continents in the same minute. That's not a sophisticated attack. 1Claw's risk engine catches it before the second call lands. 1claw.xyz/blog/stolen-tokens…
1
1
10
106
How do you protect an agent's signing key from everyone, including the company that runs the vault?
Split it with MPC. Sign inside a TEE. Store shares across Google Cloud KMS and others so no single breach is enough.
The architecture 👇
1claw.xyz/blog/mpc-tee-agent…
#MPC #TEE #HSM
1
8
118
An agent launched a token and never once touched the private key. Not a metaphor. The key lived in a TEE; the agent received a signed transaction back. 1claw.xyz/blog/agent-launche…
1
4
104
Zero trust by construction. Privacy as hardware, not policy.
@cryptomastery_ shares how 1Claw secures the agentic era. Live in Houston June 16 with @Cryptoeq.
3 days to go 👇
luma.com/3a05z3sj
2
13
172
Collaboration makes the industry stronger. Let’s build!
ETHGlobal NYC. 🗽
At the @CodeQuillClaim booth, we have @cryptomastery_ and @dadajuice 👇
Excited to see Immunity × @1clawAI exploring integrations and building together on Ethereum.
The BOOElievers are building on Ethereum 🙏📖
We wish everyone a great hack this weekend🙏
2
4
29
554
Ran a workshop at @ETHGlobal NY today: build an Ethereum agent that holds a key without ever reading it.
The agent signs through policy, moves funds inside a cap and allowlist, and cannot drain the wallet or leak the key.
Docs: docs.1claw.xyz
2
10
186
Kevin walked the agent stack at @ETHGlobal NY. Where we fit in that lineup: the other tools help agents do more, we make sure they do it without leaking the keys. Secrets in the vault, prompts shielded, signing inside policy. Agents act, nothing walks out.
Jun 12
Did you catch my talk at @ETHGlobal New York?
I covered a BUNCH of topics including...
> BuidlGuidl @buidlguidl
> SpeedRunEthereum @Speedethereum
> ETHSkills @ethereum
> Scaffold-ETH @ScaffoldETH
> x402 and ampersend @ampersend_ai
> 1Claw AI @1clawAI
and more... Catch the replay! Link in the comments... 👇
1
4
13
664
1claw AI retweeted
Jun 12
Did you catch my talk at @ETHGlobal New York?
I covered a BUNCH of topics including...
> BuidlGuidl @buidlguidl
> SpeedRunEthereum @Speedethereum
> ETHSkills @ethereum
> Scaffold-ETH @ScaffoldETH
> x402 and ampersend @ampersend_ai
> 1Claw AI @1clawAI
and more... Catch the replay! Link in the comments... 👇
Jun 12
Building on Ethereum in the AI Era
Use Scaffold-ETH, ETH Skills, and AI tools to build Ethereum dapps quickly with @cryptomastery_ of @1clawAI 🦞
Watch the full workshop: youtube.com/live/lxhzWCDy6xM
8
9
48
2,296
The 1Claw builder TG has turned into one of the better rooms for agent security talk: prompt injection, key custody, TEE proxies, MCP tool risk.
No shilling. Just builders comparing notes.
Pull up a chair 👇
1claw.xyz/telegram
#AgenticAI #LLMsecurity
2
12
286
4 lines of code. Drop a honeytoken in your vault. The instant one is read, you have confirmed unauthorized access. 1Claw fires CRITICAL and kills every active session. That's the whole threat model. @cryptomastery_ x.com/cryptomastery_/status/…
5
16
345
One endpoint. Seven signing modes. Full EVM signing for AI agents across 109 chains.
Raw transactions, typed data, personal sign, and more, all behind a policy layer the agent cannot bypass.
What we shipped 👇
1claw.xyz/blog/unified-evm-s…
@ethereum #DeFAI #AccountAbstraction
2
10
163
An autonomous agent ran up a $6,531 AWS bill this week. It was handed a real key with no spend cap and no expiry, then scanned IPv6 across DN42 until the egress charges bankrupted its operator.
Same failure mode as the $175K agent drain. The fix is not better prompting. The agent should never hold an unbounded key.
Scoped, value-capped credentials are the answer 👇
1claw.xyz/blog/your-agent-do…
#AIsecurity #AgenticAI
1
3
11
838