Writing
The thinking is public. The build is not.
On the gap between possession and identity, the losses institutions do not yet count, and cryptography that has to outlive the machines it is defending against. Newest first.
Series
Current series · Four parts · Weekly from 28 September
The Uncounted
Two measured categories of loss, and a third that neither captures. Four South African cases from the public record, read as one pattern.
1 / 4 published
- IThe three weeks nobody countsDwell time, and the interval financial-sector controls and disclosures were never designed to measure.Read →
- IIOne provider, many perimetersThird-party concentration, and why an institution’s own controls cannot see the environment that now holds its clients’ data.5 Oct
- IIIThe request that looked legitimateTrusted channels, and what happens when a process is followed correctly and the request itself is fraudulent.12 Oct
- IVIdentity at the sourceWhat happens to onboarding checks once the documents they depend on are themselves in circulation.19 Oct
Articles
- Feb 2026The Ferry HeistWhat the 2025 losses on cross-chain bridges reveal about the infrastructure we are building, and where security actually fails.LinkedIn ↗
- Feb 2026The Quantum MandateWhy new financial infrastructure can win the post-quantum race that incumbents are already running late.LinkedIn ↗
Papers & carousels
- Apr 2026The Institutional ConvergenceFour institutional signals published independently in the first quarter of 2026, converging on the same conclusion about cross-network security.Paper · PDF · 7 pp
- Mar 2026Shifting the Trade-Off CurveHow post-quantum architecture changes the security calculus, and why the cost of deferral is no longer symmetric.Carousel IV · PDF
- Mar 2026The Independent Failure Domains DoctrineCross-chain infrastructure has three independent failure domains. Post-quantum cryptography addresses one.Carousel III · PDF
- Mar 2026Inside the Attack SurfaceValidator architecture, the economics that make attack rational, and the laundering dimension the 2025 data makes visible.Carousel II · PDF
- Mar 2026The Settlement LayerWhat the 2025 loss data reveals about the infrastructure beneath CBDCs, stablecoins and cross-border settlement.Carousel I · PDF