We ran a full AI audit across a live AI-agent protocol's contracts. The results: multiple critical and high-severity flaws across the bridge, governance, lending, router, and task modules. Details are withheld under responsible disclosure.
| Module | Findings | Worst |
|---|---|---|
| Cross-chain bridge | Cross-chain double-claim, signature gap, missing chain binding | Critical |
| Lending pool | Bad-debt handling gap, oracle validation, state ordering | Critical |
| Timelock | Delay settable by anyone incl. zero | Critical |
| Governor | tx.origin voting, no quorum | High |
| Task router | Fake-completion payout, dispute-window logic | High |
| Router | No slippage protection, residual approvals | High |
| Bridge validator | Duplicate-signer consensus, validator dilution | High |
Several are the kind of bugs that have drained real bridges and protocols — live today in an active project.