02 Scan
Open code and large private repos are now cheap to inspect. In July–August 2026 that stopped being theoretical. Frontier models draft the review; a human reads blast radius and signs the report.
Not a pentest. Not a guarantee. A first read.
01 The climate
A 2021 firmware path used a software PRNG fallback instead of the hardware generator. Seeds were weaker than advertised. Attackers enumerated keys and drained wallets. Coinkite said it has to assume someone used AI on public firmware. Their own model pass weeks earlier missed the bug. After disclosure, models could rediscover the pattern quickly.
Versions before 2.4.2 let an unauthenticated attacker reach LND admin .macaroon credentials and control connected Lightning wallets. Funds were stolen. Bitcoin Red Team ran AI-assisted sweeps. BTCPay wrote that AI changed the attacker/defender balance. The exploited issue was also sneaky — a digest is not a substitute for a human reading blast radius.
Contextblog.btcpayserver.org — security advisory 2.4.2blog.btcpayserver.org — incident response and next steps
NakaUnbound did not discover these incidents. They are why the Scan exists.
02 Pricing
Take the number a company is paying — or has been quoted — to build or maintain a website, or to staff a task with an employee or a consultancy. NakaUnbound ships the same outcome for one tenth of it.
A code review from a consultancy
the engagement feeOne tenth of that fee
frontier models read the repo; a human signs the reportA website built or maintained by an agency
the quote, or the monthly retainerOne tenth of that quote
site, hall or game — shipped and kept currentA task staffed by an employee or a contractor
the fully loaded cost of the seatOne tenth of that cost
a scoped operator that does not sleep, with a human who signsWhy the tenth holds
Humans and consultancies price for a fiat world — offices, benefits, bench time, margins stacked on margins, and a rate card built for a model that is ending. NakaUnbound prices for the work. Frontier models do the labor, a human directs and signs, and the studio accounts on a foundational bitcoin standard: no overhead to defend, no headcount to justify.
It works because we account in bitcoin and prefer to be paid in it, whatever the market price on the day. Every job accumulates on the balance sheet, and the balance sheet is what we leverage — not a rate card.
Simply call us in.
Send the number you pay today — a quote, an invoice, a salary line. We ship the replacement for a tenth of it.
Quoted in EUR, paid in bitcoin by preference; EUR is accepted and converted on receipt. The tenth is of the number you show us. Scope stays scoped: a scan is a first read, not a pentest and not a guarantee.
One codebase, read or write access, and who should receive the signed report.