Ken Fromm retweeted
Asked some cit sec friends on why citadel sued CFTC to "pace the perp frontier" last week. Here's the summary:
> If you do pay for order flow, perp flow has much less spread compare to options. most retails don't think about how to price options convexity or vol, while perp is linear, simple, in favor of retails but not sexy for mm
> thus if us retail leverage flow move to perp, the mm profit pie will shrink. cit sec is suing not just for themselves but for the mm industry (very altruistic of them)
> cit historically is slower than HRT/JUMP when it comes to new things
> flow sources might change when new instrument is introduced. you don't want that change if you think you are king of the current sources
Ken Fromm retweeted
seconded. this is one of multiple reasons the @monktoberfest exists, in fact.
Ken Fromm retweeted
Reality of our days:
1. I am sitting on a set of vulns (4+) that allows me to remotely take over a consumer home automation device I have (3+ diff ways).
2. The vendor doesn't only serve consumers, but also critical infra (announced partnerships include pharma manufacturing plants, airport logistics, hospitals, etc) across various locations in Europe and the US (not the same product line, ofc, so maybe moot).
3. Claude and Astra refuse to help me explore even my own device, so now I'm using Chinese hosted models for investigating.
4. The vendor (with a revenue of $0.75B) does not maintain any security disclosure practice whatsoever, nor does respond to emails.
So, to recap, I need to outsource vulnerability hunting of (potentially, I don't know) critical western infrastructure to Chinese models, because the western models refuse; and the vendor doesn't give a shit. Fun timeline.
PS: The vendor is Swiss.
Ken Fromm retweeted
Pearl doesn't mine hashes. It mines matrix multiplication.
That's the same math every LLM uses to train and to answer a prompt, per Evan Van Ness on The Rollup.
"Pearl is mining via arbitrary matrix multiplication, which is what every AI model, every LLM, every machine learning… uses."
The pitch: turn the work GPUs already do for AI into the work that secures a chain.
FT @evan_van_ness @prlnet @therollupco @andyyy
Ken Fromm retweeted
In 2026, you have to fire your marketer if they:
1. Fully rely on AI to write content for your socials
2. Don’t track how your brand appears in AI search results
3. Launch campaigns because “a competitor did”
4. Build marketing strategies with ChatGPT and don’t verify its claims against real research and data
5. Think “AI influencers” are still a viable growth strat
6. Stop underperforming campaigns without understanding why results were poor
7. Can’t name at least 3 key marketing trends for 2027
8. Can’t attribute traffic spikes to any specific source
9. Have no idea what they can do to improve retention from the marketing side
10. Don’t experiment with AI for customer research, performance tracking, or data analysis
What else?
Ken Fromm retweeted
When a massive paradigm shift happens in this world, existing structures and rules are bound to be broken.
> Uber vs. local regulators
> Instacart vs. grocerers
> Plaid vs. banks
> Napster vs. record labels
> DoorDash vs. restaurants
And now, agentic commerce vs. networks/merchants.
Every paradigm shift takes years. It takes a scrappy, relentless teams, with no structural burden, to solve the cold-start problems.
Merchants won't support agentic commerce for years. Peaks and troughs will happen. Once agentic commerce becomes less talked about, momentum will die.
The winners will be the teams who can fight through.
Ken Fromm retweeted
Jensen Huang getting caught with a suspected Chinese spy is not a national security crisis. It's the greatest liquidity event in market history.
He's running the Lou Pai Enron playbook to perfection. How do you dump billions in $NVDA at the absolute peak of the AI bubble without spooking the tape or triggering an SEC/DOJ insider trading? You get a divorce judge to legally force you to liquidate the position.
Zero regulatory blowback. Generational bag secured. 🏆 Undisputed GOAT.
Regulators hate this one simple trick.
Ken Fromm retweeted
After my Devcon 8 talk (the LLM hacking hardware one), somebody asked what have I hacked in my own home.
So naturally, I arrived home today, and you know... not a bad idea?
HOLY FUCK
This isn't coding error, this is criminal negligence 😱
Ken Fromm retweeted
Susie Wiles was the worst White House Chief of Staff in American history. In the space of two years she destroyed an unprecedented bipartisan coalition that came together to end the chronic disease epidemics. Her boss was genocidal monopoly capital which she served with glee.
Ken Fromm retweeted
in the past couple weeks have had several conversations with mid-career professionals who are struggling to collaborate with junior colleagues who they feel are treating them callously “like I’m just an LLM they can prompt endlessly, without gratitude”
Ken Fromm retweeted
JUST IN: 🇺🇸 Former FBI agent pleads guilty to stealing $2.47 million in cryptocurrency using wallet credentials obtained from FBI investigations.
Ken Fromm retweeted
🔗 @alexandersblume says onchain vaults will be critical to global finance but the benefits remain out of reach for U.S. users
Ken Fromm retweeted
Here's the thesis for why Stripe will lose agentic payments:
There are currently two methods that Stripe uses to route agentic payments. Shared Payment Tokens and Issued Cards.
Shared Payment Tokens is a stopgap solution with 0 adoption. It still requires merchant buyin, and networks hate it.
Issued cards are a terrible product. Single auth limitations, lack of rewards, identity mismatches, and decreased success rates are just a few of the problems at hand.
The industry will go directly from raw PANs to agent tokens (VIC, AgentPay, etc.). Once agent tokens proliferate, Stripe loses its edge, and everybody is back to square 0. The network effect they've cultivated won't matter, and the only thing left is their brand image.
By then, the startups who have prioritized building exceptional user experiences will control the distribution. The network effects will have completely shifted.
Focus on building great user experiences.
Within agentic commerce, @Shopify & @stripe are taking different approaches to supporting agentic network tokens. They diverge on whose credential the agent holds.
Both have huge merchant bases and are now expanding into the consumer side with their own wallets: Shop Pay for Shopify & Link for Stripe.
With Stripe, the agent gets a Stripe credential. It can be a Shared Payment Token (which can have a Visa or Mastercard agentic token inside it) or a single-use virtual card issued by Stripe. Either way, Stripe sits in the middle of every agent purchase. Stripe retains control, but in doing so, creates a suboptimal experience for card networks and end users. Card networks find it harder to tie a purchase back to the end user; end users can run into issues with disputes and returns when a different payment credential is inserted within the payment flow (see @scottew 's post below).
Shopify is choosing to bypass this extra layer of friction. Shop Pay now carries Visa, Mastercard, Amex, and Discover agentic tokens directly. You can pay through an agent at any merchant, whether it's a Shopify store or not, and keep your card’s rewards and protections. The networks get to use their own tokens, so it’s not hard to see why they signed on, and it's a simpler UX for the end users.
The funny part is that Stripe still processes Shopify Payments. Shopify’s fine with Stripe moving the money. It just doesn’t want Stripe owning the credential too.
I think this matters more than it looks. The credential is how you see the customer at the moment they pay - it's a data play - and Shopify wants Shop Pay to be used everywhere, not just on its own stores.
Ken Fromm retweeted
Funny thing is, we always find more for people to do!
My company uses AI heavily (as in, NOBODY writes code anymore) for building features, but we're still hiring more engineers because the desire for more and better is infinite!
Replying to @LoveCodeTrade
Related, tech is predicated on not creating jobs. Google doesn't hire high school-educated working-class people in significant numbers. Instead tech offers managers the dream of driving profits by firing employees and scaling via tech stack.
Ken Fromm retweeted
a16z and a few other investors paid $68 million for roughly 3% of gamma
Gamma raised $12M from Accel in 2024 and its founder told The NY Times it has not spent any of that money 🤯
Canva is the closest most recent comp, valued at $42B in Aug from an employee stock sale. Canva has 220M MAUs and $3B annualized revenue. Gamma has $100M ARR and 70M users, 600k of which are paying
Use of funds is for offerings for corporate users (the sweet smell of enterprise licenses), international growth (only 4.6M of 70M gamma users are in the U.S. so clearly this is one of their focus areas), AI engineers (I hear these are expensive atm), and possibly M&A (I’d place my bet on acquihires for those engineers)
Everyone is calling gamma the PowerPoint and Google slides killer, but Canva should really be worried. Canva is way behind in AI and has 5500 employees (110x gamma’s 50 FTEs). Think $2M revenue per employee vs $545k (I mean canva’s number is pretty good but still)
Any % of gamma sounds very nice right now. Hats off to Sarah Wang for making this deal happen. I can’t imagine there was a shortage of VCs trying to get a piece of this biz
Prosumer software for the win
Ken Fromm retweeted
AI agents are starting to shop for us. But agentic commerce is a mess.
If your agent buys the wrong thing, who pays?
While banks figure that out, some apps are giving agents their own money to spend. We might not need banks at all.
Fascinating times.
Ken Fromm retweeted
Replying to @dantelex
It's not an excuse. It's a felony.
Doesn't matter if it was an agent, human or AI, you still hacked brudda.
Ken Fromm retweeted
The recent discourse on agentic commerce on x led by @vigstar1 is really nice (instead of just funding announcements).
But there’s a lot of it, so I asked @bot to grab relevant posts from @scottew @vigstar1 @alfongj @RonakDaya @regulatorynerd @soupsranjan @sophgoldb @amandapey @davistrazza @mttjon @heysamir_ and @noyesclt and turn it into a podcast episode:
open.spotify.com/episode/5Sj…
Summary:
Core problem: when an AI agent buys something for you, the payment can go through and still be wrong. You asked for a refundable hotel and it booked the nonrefundable one. The card worked fine. Nobody in the chain can see what you actually asked for.
Basics: a normal card purchase has five players. You, your bank, the network (Visa, Mastercard), the merchant, and the merchant’s processor. The merchant pays about 2 to 3% per sale, mostly to your bank. That fee funds your rewards, and it’s what everyone is fighting over.
Agents pay in roughly four ways today:
1. Some type your real card into checkout, which works but is a security mess.
2. The networks built “agentic tokens,” which are the cleanest idea, but big banks like Chase don’t support them yet.
3. Others give the agent its own card.
4. And the newest option is a prepaid balance.
The third option is what happened to @scottew. He picked his Amex in Muse. Link charged his Amex, then quietly created its own Visa to pay Best Buy. One item failed, Best Buy asked for that Visa’s security code, and he had no way to find it or know who to call. His ask is simple. Use the card I picked and let the store charge me. Swapping in a different card breaks rewards, muddies purchase protection, and leaves no clear place to get help.
@RonakDaya’s guess on why it happened is that Best Buy likely isn’t set up for Link, and Amex can’t be tokenized for merchants like that yet, so Link fell back to a one-time card. The card you pick isn’t always the card that pays.
So why would Stripe sit in the middle (@mttjon asked)? By putting its own card in the middle, Stripe earns the fee on the second leg. But the margin is thin, about $0.40 on $100 by @vigstar1’s estimate, and Visa and Mastercard dislike the setup.
Hence the recent Link Balance launch: You preload money and the agent spends it without asking each time. Under the hood it’s a stablecoin plus a prepaid Visa from a small bank that’s exempt from debit fee caps, so it’s cheap to load and profitable when spent. The catch is that Link’s terms say agent mistakes like hallucinations and misreads don’t count as unauthorized. If the agent buys the wrong shoes, that’s on you. The balance also isn’t FDIC insured.
The takes are split.
@regulatorynerd thinks the card-in-the-middle approach is bad for consumers and the winner will tokenize your real card, and that agents built on janky checkouts will “wear the stink.”
@krunalbhayani calls it Stripe chasing fees at everyone else’s expense.
@vigstar1 says agentic tokens aren’t reliable yet, and the real issue is that nobody carries the risk when an agent gets your intent wrong.
@noyesclt says forget “know your agent.” Banks want to know what you allowed and that the agent stayed inside it.
The bigger picture, via @alfongj, is that Stripe has the merchants and now holds consumer money on its own rails. If both sides are on Stripe, a purchase could skip Visa entirely.
@RonakDaya also zooms out past shopping. For personal purchases, a balance works because the money left and the permission left are the same number. If $637 is left, the agent can spend at most $637. Business use breaks that. “Renew approved vendors, max $10k each, $100k a month, no contracts over a year” is a set of rules, not a balance. Someone has to track what’s spent, reserved and still allowed across every agent, and he hasn’t seen anyone own that yet.
His sharpest point is about mistakes that stay inside the rules. The agent books a $550 hotel under a $600 cap, and it’s awful. Every control worked. He sees it as a bad employee call, so whoever delegated owns it unless someone explicitly takes on that risk.
























