Find the failure modes your system’s rules allow.
Independent analysis of architecture, incentives, and authorization boundaries for AI, DeFi, and complex systems.
Request a free consultation · Explore the research
CPK Solutions is the independent practice of Christopher Patrick Kuntz in Moose Jaw, Saskatchewan.
Founder and Principal, CPK Solutions
Moose Jaw, Saskatchewan, Canada
Founder and Principal, CPK Solutions
Moose Jaw, Saskatchewan, Canada
LinkedIn · GitHub · ORCID · SSRN
Evidence behind the analysis
Bifrost Infrastructure
Infrastructure security research spanning Kubernetes, cloud systems, and the trust boundaries between connected services. Read public record
Coin98 Super Wallet
Cross-platform wallet security research covering browser, Android, and iOS, with a focus on wallet isolation and application trust boundaries. Read public record
RevShare Ecosystem Compromise
I reconstructed the wallet activity behind a multi-project compromise and identified centralized custody as the common point of failure. Estimated long-term economic damage · USD: $150K–$250K. Read public record
RevShare: the custody failure behind a multi-project compromise
The analysis connected drained distribution wallets, fund consolidation, a precursor incident seven days earlier, and post-incident authority changes. Separate project wallets depended on keys held by the same backend.
The economic fallout
Estimated long-term economic damage · USD: $150K–$250K.
Estimated incident-time economic cost · USD: $20K–$25K.
Estimates from the published analysis. Long-term damage includes indirect ecosystem effects and is separate from the incident-time cost. Public evidence does not resolve external compromise versus insider action.
Read the RevShare forensic analysis
What happens when valid actions add up to an unsafe system?
An action can pass authentication, authorization, rate limits, and input validation while its repeated or combined effects still create harm. My work on lawful instability examines this gap: how incentives and automation interact with a system’s rules, and which constraints could keep the whole system within safe bounds.
This work complements established application-security and business-logic testing, with an emphasis on aggregate behavior and systemic risk.
What an engagement delivers
- A clearer risk picture: documented failure modes, assumptions, and implications.
- Priorities for decisions: technical findings and architectural recommendations.
- Independent review: analysis and review of proposed fixes; your team owns implementation.
Systems I analyze
AI agents and identity systems. DeFi custody and incentives. Game economies, player markets, payments, and governance.
Community
Secretary and Director, Moose Jaw Boxing
CPK Solutions is Moose Jaw Boxing's founding community partner and works with the club pro bono.
Youth basketball coach, MJ Ballers Basketball Club, Moose Jaw
Provably Fair Basketball grew out of that coaching.
Provably Fair Basketball: Free, privacy-first coaching toolkit with fair tryout evaluation, season planning, and practice resources.
Let’s examine the risk.
Start with a free 30-minute consultation about your system, the decisions ahead, and the questions you need answered.