Vulnerability Research

Ultrafuzz, an agentic smart-contract fuzzing orchestrator, is now open source. Its four experiments reveal what actually makes AI-assisted vulnerability discovery work — and the lessons apply well beyond DeFi.

Researchers say Kimi K3 agents chained a Redis streams double-free with a RedisBloom heap overflow into working authenticated RCE, with one exploit produced in 27 minutes. Redis shipped seven security releases in response. The claims are self-reported — but the patches are real.