Find the failure modes your system’s rules allow.

Independent analysis of architecture, incentives, and authorization boundaries for AI, DeFi, and complex systems.

CPK Solutions is the independent practice of Christopher Patrick Kuntz in Moose Jaw, Saskatchewan.

Request a free consultation · Explore the research

Evidence behind the analysis

Bifrost Infrastructure

Infrastructure security research spanning Kubernetes, cloud systems, and the trust boundaries between connected services. Read public record

Coin98 Super Wallet

Cross-platform wallet security research covering browser, Android, and iOS, with a focus on wallet isolation and application trust boundaries. Read public record

RevShare Ecosystem Compromise

I reconstructed the wallet activity behind a multi-project compromise and identified centralized custody as the common point of failure. $150K–$250K — Estimated long-term economic damage · USD. Read public record

RevShare: the custody failure behind a multi-project compromise

The analysis connected drained distribution wallets, fund consolidation, a precursor incident seven days earlier, and post-incident authority changes. Separate project wallets depended on keys held by the same backend.

The economic fallout

$150K–$250K — Estimated long-term economic damage · USD.

$20K–$25K — Estimated incident-time economic cost · USD.

Estimates from the published analysis. Long-term damage includes indirect ecosystem effects and is separate from the incident-time cost. Public evidence does not resolve external compromise versus insider action.

Read the RevShare forensic analysis

What happens when valid actions add up to an unsafe system?

An action can pass authentication, authorization, rate limits, and input validation while its repeated or combined effects still create harm. My work on lawful instability examines how incentives and automation interact with a system’s rules, and which constraints could keep the whole system within safe bounds.

This work complements established application-security and business-logic testing, with an emphasis on aggregate behavior and systemic risk.

What an engagement delivers

Systems I analyze

AI agents and identity systems, DeFi custody and incentives, game economies, player markets, payments, and governance.

Community tools include Provably Fair Basketball, Lucky Pick Axe for Critters Quest, and Auditr SDK. Explore built systems.

Compare analysis engagements · Request a free 30-minute consultation