waybrioWORKING HYPOTHESIS
A release may have crossed the bridge’s accounting boundary without a matching source commitment.
Alternative explanation
An incomplete source index or an unsupported aggregation rule could make a valid release appear unmatched.
WEB3 & CRYPTO SECURITY
Confidence.
Under pressure.
Adversarial security assurance for the contracts,
wallets and networks your business depends on.
ONE CONNECTED ATTACK SURFACE01 / 03
01 / THE CODE
Before the
first transaction.
Test the assumptions inside your contracts. Find broken invariants, privileged paths and the edge cases an attacker would look for.
TRUST RELATIONSHIPSILLUSTRATIVE MODEL
Assumptions under review Code → Interaction → Network
THE EXPERTISE
Deep scrutiny.
Across every layer.
Technical testing. Human context. Evidence you can act on.
WAYBRIO COMMAND CENTRE
Follow the evidence.
Test the next move.
Connected investigations. Inspectable evidence. A hardening lab that puts proposed controls through explicit safety checks.
Open full workspace 28 SEP 2026 · 14:00 UTC
Synthetic dataset
Fictional entities, events and values. No live monitoring or production changes.
THREAT OPERATIONS
Investigation overview
Session changes only
Critical exposures02Unresolved in this dataset
Open investigations04/ 051 resolved
Mapped entities56Across five synthetic cases
Modelled value observed$18.7MIllustrative activity · not loss
Controls verified5/ 15Evidence coverage · not accuracy
WB-7F3A/Cross-chain integrityCritical
Bridge settlement mismatch
A destination release exceeds the matched source lock by 150,000 fixture units.
Entity relationships12 entities · 2 chains
Observed event Context link Review signal
100%
EVIDENCE TIMELINE
28 September 2026 · all times UTCSelect an event to inspect its source and relationship.
RECOMMENDED RESPONSE
Reconcile message payloads, token decimals and finality. Prepare a settlement hold for operator review if the difference remains unexplained.
The mismatch is a review signal. It does not establish an unauthorised release or realised loss.ADVERSARIAL HARDENING / RESEARCH WORKSPACE
Change the control.
Preserve the invariant.
A practical starting point for synthetically hardened infrastructure: compare a candidate against explicit safety properties before approval.
IsolateSynthetic state01
ChallengeBounded test inputs02
VerifySeven model checks03
ReviewHuman release gate04
C-03 / SELECTED CANDIDATE
Constrained hardening
INVARIANT REGISTERNot evaluated
Unauthorised upgradeAUTH-01 · Role threshold model
ReadyReview windowTIME-01 · Timelock boundary model
ReadyCross-domain replaySIGN-01 · Domain equality check
ReadyAllowance constraintSPEND-01 · Spend boundary model
ReadyOracle deviation guardPRICE-01 · Price deviation model
ReadyStorage compatibilitySTATE-01 · Ordered schema comparison
ReadyValue conservationVALUE-01 · Balance transition model
ReadyPROPOSED CHANGES
- Quorum and review delay enforced
- Replay domain, allowance and price bounds applied
- Original storage prefix preserved
MODEL RECEIPT
Run a candidate to generate an inspectable evaluation receipt.
Research boundary
This lab evaluates a small JavaScript policy model. It does not compile contracts, prove equivalence, generate zero-knowledge proofs or provide quantum key splitting. Production work requires isolated execution, threat modelling, independent review and protocol-specific release controls.
THREAT INTELLIGENCE
Threats evolve.
So should the questions.
When safeguards disappear.
Models with removed or weakened safeguards can make abusive content easier to produce. Open weights alone do not make a model “guardrail-free”. Verification, permission boundaries and human review still matter.
Read the researchA convincing persona.
A costly illusion.
Romance baiting and investment scams can combine synthetic personas with sustained human manipulation. Investigate the relationship, payment request and destination together.
Explore the human impactFollow value.
Preserve context.
Cross-chain movement and stablecoin transfers demand careful evidence review. Mixer proximity, wallet clustering or sanctions signals must be corroborated before conclusions are drawn.
Read the FATF reportROMANCE BAITING / THE HUMAN COST
The money moves.
The harm stays.
Romance baiting turns a relationship built on deception into a financial trap. Sometimes called “pig butchering”, this form of investment fraud exploits trust, then leaves real people facing loss, uncertainty and betrayal.
A$28.6m+
Romance-scam losses reported
to Scamwatch in 2025
21.8%
Increase in reported money stolen
compared with 2024
A growing reported toll.
These figures cover Scamwatch reports, not all Australian losses or only crypto scams.Scamwatch · 5 February 2026Savings lost.
Debt that remains.
The impact can reach everyday bills, housing and long-term plans. When borrowed money is stolen, repayments can continue after the scam ends.
A relationship lost.
Trust fractured.
People can grieve the relationship they believed was real while facing financial loss. Shame and fear can make asking for help harder. Responsibility lies with the criminals.
The next approach
can be another scam.
Offers to recover stolen funds can target the same person again. A recovery promise or a demand for an upfront fee deserves independent scrutiny.
FINANCIAL OBFUSCATION
Harder to follow.
Harder to resolve.
Moving proceeds between wallets, services and jurisdictions can conceal who controls the money. Mixing services can further blur transaction links. For someone whose savings were stolen, an incomplete trail means more uncertainty about where the funds went and whether recovery is possible.
Our investigation approach: preserve payment records and conversations, map observed transfers, and distinguish evidence from inference. A suspicious connection is a lead to examine; it does not establish identity or guilt. Tracing cannot guarantee recovery.
FATF: virtual-asset risk indicatorsAUSTRALIA’S RESPONSE
Disrupt the networks.
Support the people.
Operation Firestorm
Launched in August 2024 through the AFP-led Joint Policing Cybercrime Coordination Centre (JPC3), Firestorm targets offshore organised crime networks behind romance, cryptocurrency and investment scams.
5,000+potential Australian victims warned in January 2025 following a Philippines scam-centre investigation
Read the AFP / NASC joint releaseAn Australia–Thailand statement on 19 August 2026 also acknowledged Firestorm’s contribution to arrests and scam-centre disruption across Southeast Asia.
Read the August 2026 updateRomance Scam Fusion Cell
This separate, time-limited taskforce ran from July to December 2025. It brought together platforms, banks, law enforcement, crypto exchanges, support services, researchers and survivors.
1,004suspected scam transactions referred for investigation, blocking and blacklisting
Its March 2026 report also records 168 suspect crypto wallet referrals and work on trauma-informed responses and survivor support.
Read the taskforce findings · 6 March 2026Public-source briefing · reviewed 28 September 2026. Waybrio is independent and is not affiliated with or endorsed by the AFP or National Anti-Scam Centre.
START WITH THE RIGHT QUESTIONS
What are you
building trust on?
Define the assets. Agree the boundaries. Examine the risk.