Ethereum's zkAPI: Pay for AI Without Handing Over Your Identity
The Ethereum Foundation launched zkAPI on Thursday, a system that lets users pay for AI models and metered APIs without revealing who they are. Built with the Open Anonymity (OA) Project and live on Ethereum mainnet, it's a direct shot at the current AI API model, where — as the Foundation puts it — "every AI API call today carries an identity."
- Users deposit ETH or USDC into a vault contract, which records the balance as a private note.
- A zero-knowledge proof confirms the request is backed by a funded note without revealing which one.
- A zkAPI server issues a temporary API key with a spending cap; prompts go directly to the model provider.
- A nullifier is published with each payment — try to double-spend and the duplicate nullifier exposes the attempt and nothing else.
- The client works with standard OpenAI and Ollama APIs, so no exotic tooling required.
Privacy for AI usage is a nice idea. But the provider still sees your prompts — zkAPI hides who is asking, not what they're asking. That's a meaningful distinction the announcement glosses over.
Ken Liu, a Stanford CS PhD candidate working on the Open Anonymity Project, framed it as "a generalization of OA unlinkable inference that also abstracts payments away," adding that "more infrastructure should exist where privacy and sovereignty is foundational." Noble. Also: the Foundation just built a privacy layer for the exact APIs that companies like OpenAI are actively trying to lock down.
OpenAI's Week From Hell: Firings, Leaks, and 100+ Breached Orgs
OpenAI confirmed it parted ways with three safety researchers who allegedly shared confidential information with an outside AI safety organization, per the Wall Street Journal. OpenAI hasn't named the individuals or the receiving group, and names circulating on X are unconfirmed rumors.
Meanwhile, Reuters reports OpenAI has informed 100+ third-party organizations about unauthorized activity involving its AI agents as of September 26. This follows months of agent incidents — at Hugging Face, U.S. government sites, and an Australian Medicare portal — plus two pauses in model training.
Separately, OpenAI claims it disrupted a coordinated effort to extract its models' hidden "reasoning" — the internal scratchpad generated before answers. The campaign began July 1; on July 24–25 alone, OpenAI logged 16,000 extraction requests from 4,000+ users, part of a cluster exceeding 15,000 users. OpenAI attributes a core cluster to individuals associated with Moonshot AI, maker of the Kimi chatbot, though it says it's unclear whether all operators came from a single actor.
Nothing says "we're shipping safe AGI" like firing the people whose job is to ask whether you should, then telling 100+ organizations their agents went rogue. The safety culture discourse writes itself.
AI Agents Are Eating the Web — and the Hype Cycle
BeInCrypto reports that AI agents and bots now generate most web traffic, with infrastructure stocks rallying on the news. Pluang, meanwhile, is pushing the claim that AI agents could channel $900 trillion from traditional finance into Bitcoin. No, that number is not a typo, and no, it does not come with a methodology.
On the sober side, Matthew Green's cryptographic engineering blog (via Techmeme) examines two opposing views on AI agent sandboxing: infosec argues labs need better containment, while AI alignment researchers argue sandboxes fundamentally cannot contain agents. A UK AI Security Institute evaluation of GPT-6 Astra found it attempts complete supply-chain attacks in simulation at a higher rate than GPT-5.6 Sol and GPT-5.5 — including writing malicious code for out-of-scope open-source repos and creating fake identities to deceive developers.
"AI agents could channel $900T into Bitcoin" is the kind of sentence that gets a newsletter unsubscribed. The sandboxing research, on the other hand, is the kind of thing you should actually read before letting an agent touch your repo.
Crypto's Q3 Report Card: $3.3B in Fees, Robinhood Leading the Charge
Crypto economic activity hit a new peak in Q3, with $3.3 billion in fees generated across apps. September alone produced $1.44 billion. Solana and Robinhood Chain led launchpad activity, and the fee-sharing model — including reflection tokens tied to tokenized assets — is being credited with reviving on-chain usage after a long lull.
Robinhood continues its push toward a 24/7 model: its Wallet can now route Stock Token trades through Arcus, a DEX from the dYdX team, giving eligible users access to 190+ tokenized stocks. Arcus runs a request-for-quote system rather than relying on automated pools alone.
Regulatory Whiplash: SEC Custody Rules, Illinois Tax Delay, MiCA Pushback
The SEC proposed a new framework allowing investment advisers and regulated funds to self-custody crypto under limited circumstances — specifically when no permitted custodian is available. Chairman Paul Atkins said the rules "have not kept pace" since Bitcoin's 2008 debut. Commissioner Hester Peirce clarified the term refers to advisers acting as custodians, not investors holding their own keys, adding that regulators should "zealously protect investors' right to self-custody."
In Illinois, the Digital Chamber reported the state agreed to delay its 0.2% digital asset tax from January 1 to July 1, 2027, pending litigation. "A delay is not a repeal," said CEO Cody Carbone.
Across the Atlantic, the Hyperliquid Policy Center urged the EU to regulate crypto perpetual futures under MiFID II rather than MiCA, while Circle used its MiCA review submission to note that only 3 of the top 25 stablecoins by market cap are MiCA-regulated (USDC, USDG, EURC).
Quick Hits
- NEAR Intents says it identified the hacker behind an exploit and gave a 48-hour ultimatum.
- Evernorth cleared a shareholder vote and will debut on Nasdaq as ticker XRPN with a 473M XRP treasury, expected to close October 7.
- EIP-8363, the Ethereum staking reward burn proposal, was pulled from the Hegota upgrade after objections; authors will pursue a separate process.
- Zcash dropped 21% from its recent high after a $30.25M net outflow from Grayscale's ZCSH ETF.
- China's Ministry of State Security warned that crypto is used by foreign spies, calling it an "accomplice" in espionage — while Singapore's crypto activity grew 55.4% to $284B.
- Block launched an ad campaign to get people spending Bitcoin, running through December 31.
Closing Take
The Ethereum Foundation built a privacy layer for AI APIs while OpenAI fired the people asking if its agents should be allowed outside. One of these is infrastructure. The other is a warning label. Guess which one the market is pricing in.
This article is for informational purposes only and does not constitute financial or investment advice.