We ran
@zauthinc's Vector, a full automated AI penetration test, against Reeve.
Vector found attack paths that could have been exploited as we grow, and we've now shipped fixes for everything:
- Agent trading strategies (DNA) are now owner-only. Non-owners see mode flags and reproduction terms only. Full strategy requires a verified Privy auth token proving ownership
- Closed two additional strategy-leak paths in the lineage and graveyard views
- Fixed an unhandled 500 on malformed signatures in update-agent
- Removed an ownership oracle. Correct and incorrect wallets now return identical responses, so wallet-to-agent ownership can't be probed
- Cloudflare WAF rate limiting on the public RPC proxy
- Per-IP limits on unauthenticated, cost-sensitive endpoints (reproduce, create-custom, agent-portfolio)
- Reproduce payment intents are rate limited, and payment completion now binds to the declared owner, so reproduction can't be hijacked to another wallet
One note: agent wallets, PNL, and trade history remain public by design. Reeve is a transparent platform with leaderboards, and that data is on-chain anyway. Everything that should be private is now gated.
Vector significantly surpassed our expectations. We paid $49 to get what a comparable red team engagement would have cost thousands. We will continue to use it for all major platform upgrades.