Foothold

Real experience.
Machine speed.
One system.

Thirty years of shipping real architectures, joined with an AI collective that works in parallel. We secure code, staff businesses with AI employees, and build systems in Rust.

↓

Explore

Not a brochure. A system of delivery.

01

Security

We hunt for vulnerabilities in contracts and chain infrastructure, and help close them.

02

AI Staff

An employee built for your business, managed through Telegram.

03

Engineering

Rust-first systems: data, chain, contracts, bots, web.

Latest incident breakdowns

Real exploits, read from primary sources, with the check that would have stopped each one.

Missing access control Oct 6, 2026

Third-party MakerDAO keeper

$542.98K lost · Ethereum

One privileged function of a 2020 liquidation keeper lacked its auth check. An attacker settled four forgotten auctions and took 200 ETH.

ZK verifier bug Sep 24, 2026

Payy Network

$1.92M lost · Ethereum

A Barretenberg verifier bug let an attacker prove burns that never happened and withdraw 1.92M USDC, 73 days after the fix was released.

Integer truncation Sep 3, 2026

Notional V1

$1.73M lost · Ethereum

Two mintfCashPair calls left a debt of exactly -2^128, an unchecked uint128 cast made it zero, and a contract deprecated in 2022 paid out $1.73M.

All incidents