Taylor on Indian company eMudhra using just the number 4 as the private key to sign certificates, even through two audits "The specific company that we're talking about here is called eMudhra. An Indian company. Apparently, they're an authority. They do a lot of work, I guess, with India government and governments in that region." "Their entire job is to create a very secure private key and then sign these various certificates with those private keys, which then helps secure the internet on the whole for everyone around the world." "It turns out that instead of generating the private key in a secure way, where the private key was truly random, the private key was just the number four." "There's very little information on how exactly this happened. What we know right now, the private key has been the number four for over a year. It's been signing stuff since April 2025." "Apparently, they were audited twice in this period of time. Clearly, that needs to be reviewed."

The Quantum Alliance is here 🤝 An open standards body defining “quantum-ready” for blockchain. Proud founding contributor with @KeystoneWallet, @thevault_soft, @hackenclub, @PQabelian, @midnightfdn, @QuantusNetwork, @intmaxIO, and @Americanfort_io → quip.network/blog/postquant-…

In 2020 we looked at where crypto privacy was heading and didn't like what we were seeing. Every serious attempt was a mixer or a coin that hid everything from everyone, and anyone paying attention could see regulators would eventually ban that. They have. From July 2027 an EU exchange can't hold an account that anonymises transactions. Dubai got there first. But the thing people actually wanted was never anonymity. A company doesn't want its suppliers and payroll readable by competitors. A person doesn't want to hand over their entire financial history every time they share an address. That's privacy from strangers, and it's completely compatible with the two parties in a payment knowing exactly who each other is. So that's what we built. You send to a name instead of an address. The name produces a fresh destination for every relationship you have, on every chain it runs on, and one encrypted signal covers years of payments between you. Nobody reading the chain can tell who you pay. Your recipient always can. Then we went further than anyone asked us to. Every payment can carry a zero-knowledge proof of where the money came from. Only the recipient can read it, and they can show it to an auditor later without exposing anything else. A bridge can demand that proof before it pays out, which means a swapped or poisoned address simply can't collect. The same proof system turned out to make existing wallets quantum safe without moving a coin, and this summer we got proving time down from over half an hour to a few seconds. $AF is the token that makes the network run. It locks name reservations, pays the people who carry the signals, and covers the tolls for resolving names and sponsoring transactions. Five years, one million lines of code and sixteen patents filing later, we’re here.

"You’ve solved every single problem people have talked about in crypto for years." – Yes. In his recent interview with @MarioNawfal, @MehowHacks broke down American Fortress’s mission: deploying privacy engines across the top 50 chains. What does that mean for users? • The utility and confidentiality of Zcash, everywhere. • Use your handle, receive funds, and reveal nothing to third parties. • Seamless cross-chain privacy infrastructure. Watch the clip below 👇

The BIGGEST Crypto Breakthrough in Years! | Michal "Mehow" Pospieszalski | Full Interview

For a long time, I filed quantum risk under maybe someday, not my problem. Then I saw AF counts about 1.1M BTC from the Satoshi era with public keys already exposed. Those coins haven't moved in over a decade. If the fix is to move your funds to a new address, they're never getting fixed. And honestly, most of us won't migrate either. People don't even update their wallet apps. @Americanfort_io's research team proposed a different route. Your address stays exactly the same. Instead of a normal signature, your wallet uses a ZK proof to show it knows the seed behind that address. The security leans on hash functions, which are expected to hold up much better against quantum attacks. The catch is speed. Making the proof takes about 12 seconds right now. Checking it takes around 10 milliseconds It's a preprint on IACR ePrint, number 2026/1508. Not peer reviewed and not in the wallet yet But if protection only works when people take action, most people won't be protected. Curious what @MehowHacks thinks about getting that proving time down. Reserve your @name here: names.americanfortress.io Posting this as part of the AF creator campaign.