The Investor

What Changed Since Friday

We covered AI cybersecurity crossing into production deployment on Friday. Today's escalation is structural: Fed Chair Powell and Treasury Secretary Bessent personally convened the CEOs of BofA, Citi, Goldman, Morgan Stanley, and Wells Fargo in an emergency meeting — not a scheduled briefing, not a Congressional hearing, but an impromptu Washington session over a single model's capabilities. This has never happened before for any technology release.

Six independent intelligence streams confirm the same pattern: Claude Mythos delivers 10-30x throughput on zero-day discovery versus elite human security teams — thousands of critical vulnerabilities per year versus approximately 100. Separately, Claude demonstrated discovering and weaponizing a 13-year-old Apache ActiveMQ RCE in minutes, compressing what took skilled researchers weeks or months. A 10-year-old Docker Engine authorization bypass also resurfaced despite prior patching — when AI can find old bugs at machine speed and 'patched' doesn't mean 'fixed,' the legacy software attack surface expands by orders of magnitude.

The Information Asymmetry Is the Trade

Anthropic distributed Mythos to only ~40 organizations via its Project Glasswing program — partners including AWS, Apple, Google, Microsoft, and NVIDIA. Those organizations now have an asymmetric vulnerability intelligence advantage. Everyone outside that circle is exposed and doesn't know the specifics of how.

When the two most powerful financial officials in the country summon the heads of the five largest banks over a single AI model, the compliance spending mandate is already being drafted.

The dual-use nature creates a short-term offensive advantage for attackers before defensive adoption catches up. This classic technology diffusion asymmetry is compressed from years to months because the tool is software, not hardware. The first 12-18 months favor companies building AI-native defensive platforms; legacy pen-testing and vulnerability management players face structural margin compression.

Where the Money Flows

Multiple sources converge on the investment implications:

• AI-native financial services security — Every bank in that room is revising security budgets upward for AI-specific threats. The Fed's earlier proposal to ease cyber-related capital reserves is effectively dead — banks will be required to increase cyber resilience capital. One analysis estimates $50B+ incremental TAM expansion in financial services cybersecurity alone.
• AI red-teaming and model security auditing — Companies that can stress-test frontier models before deployment. Regulatory demand will crystallize within 6-18 months of this meeting.
• Network-layer zero-trust — The market has over-indexed on identity-layer zero trust (Okta, Zscaler) while failing at the traffic and network layer. Microsegmentation companies address the actual failure mode, not the one already priced in.

The Anthropic Paradox Sharpens

Anthropic is simultaneously cooperating with government on cybersecurity briefings and fighting its Pentagon blacklisting. The 'arsonist selling fire extinguishers' criticism is emerging — creating both reputational risk for Anthropic and a diligence requirement for every AI investment: dual-use policy assessment must now be standard. Companies willing to serve military (defense tech) gain Pentagon contracts as moat; companies restricting military use gain European regulatory alignment but lose the world's largest buyer.

The Data

a16z crypto published what amounts to a public deployment memo on decentralized perpetual futures — and the numbers demand attention. DEX perps cleared $6.7 trillion in 2025 volume, up 346% year-over-year, while centralized exchanges grew a comparatively modest 47% to $86.2T. The DEX-to-CEX ratio tripled from ~2.5% to ~7.8% in 12 months. At this trajectory, DEX share could reach 15-20% within 18 months — before accounting for the TAM expansion underway.

That TAM expansion is the real story. Real-world asset (RWA) perps — equities (NVDA, Samsung), commodities (silver, palladium, crude oil), private company valuations (SpaceX), even Nvidia H100 GPU prices — now account for up to 44% of Hyperliquid's total volume and dominate Ostium's activity. This collapses the crypto/TradFi boundary and expands the addressable market from 'crypto trading infrastructure' to 'global derivatives infrastructure.'

When a16z publishes this level of specificity — naming companies, citing growth rates, mapping builder opportunities — they're signaling deployment direction. The smart money is already in the room.

The Four Investable Layers

The ecosystem is stratifying into distinct layers with different competitive dynamics:

1. Exchange Infrastructure (Hyperliquid, Lighter, Variational) — Getting crowded fast. Hyperliquid leads with HIP-3's ecosystem flywheel. Winner-take-most dynamics apply; late entrants face brutal economics unless they bring regulatory or technical differentiation.
2. Market Deployment (HIP-3 builders, Ostium for RWAs) — Hyperliquid's HIP-3 enables permissionless perp market deployment with 50% fee share, creating capital-light businesses generating revenue within months. Easiest early-stage bets to underwrite with real fee data.
3. Distribution (Unnamed front-ends, mobile apps, trading terminals) — a16z explicitly flags that Robinhood commands a higher market cap than Nasdaq — the retail broker is worth more than the exchange. If this pattern holds in crypto perps, the biggest returns come from the distribution layer, not infrastructure.
4. Tooling & Data (Emerging) — Funding rates, liquidation dashboards, positioning analytics. Classic picks-and-shovels in a gold rush with no clear winner.

The Highest-Conviction Opportunity: Regulated U.S. Perps

Every major perp DEX is geo-blocked from U.S. persons under CFTC regulation. A regulated entrant serving the world's largest capital market would have zero onchain competition and a regulatory moat that takes years to replicate. This is simultaneously the biggest risk (enforcement could crater category valuations) and biggest opportunity (legislative clarity unlocks the deepest capital pool in the world).

TradFi Context

The comparison to 0DTE SPX options — which hit 2.3M contracts/day (+51% YoY), 59% of total SPX volume — confirms the retail demand perps serve. Perps offer structural advantages: 24/7 availability, no expiration management, simpler risk surface, global accessibility. Cboe's response (CBTX/MBTX Bitcoin ETF index options, daily-expiry Magnificent 10 options) confirms traditional venues see the threat.

Three Attack Vectors, Six Months

A pattern has crossed from anecdotal to systemic. In the span of six months, three distinct categories of physical violence have targeted AI industry figures, creating a risk category that no AI portfolio model currently accounts for:

These aren't random events. They're the first inning of a structural risk curve. The violence so far is tied mostly to AI safety movements — not displaced workers. If mass white-collar displacement materializes — and AI leaders keep publicly promising it will — the radicalization pool expands by orders of magnitude.

The Self-Inflicted Accelerant

A critical observation across the intelligence: AI leaders' own public messaging is the accelerant. Altman and Amodei openly discuss eliminating millions of jobs while simultaneously requesting social license to build the infrastructure to do so. This is a communications crisis that AI companies are inflicting on themselves — and it's creating material costs:

• Executive protection capex is becoming a line item at frontier AI labs
• Datacenter siting is transforming from a technical decision to a political campaign — community-first developers with brownfield conversions and municipal revenue sharing gain competitive moats
• Insurance premiums for AI facilities and executives are repricing
• Geographic redundancy is now mandatory, not optional — the Iran threat means every Gulf/MENA-deployed AI infrastructure position needs a multi-region disaster recovery requirement

AI infrastructure is becoming physically invulnerable — biometric locks, electrified fences, armed guards, geographic redundancy. But the humans associated with it remain soft targets. This is not a risk that can be engineered away with better firewalls.

Where the Alpha Is

Every risk creates asymmetric opportunity for the prepared. AI-adjacent physical security and threat intelligence is an emerging venture-scale TAM that didn't exist 18 months ago. 'Responsible AI' positioning becomes a genuine enterprise buyer differentiator, not just PR — companies solving social license capture disproportionate market share among enterprise buyers facing employee pushback. And any thesis relying on frictionless AI infrastructure buildout or public enthusiasm for AI consumer products needs immediate stress-testing against this backlash trajectory.