Pinned post
What happens when an AI agent has access to money and someone tries to trick it into sending that money to the wrong person?
Most agents can follow instructions. But can they recognise when those instructions are being manipulated?
We built Heist to test exactly that.
Heist is an AI agent security testing tool that puts agents through realistic financial scams.
Here's how it works:
→ Paste in your agent's instructions.
→ Heist gives it a temporary wallet funded with test NEAR.
→ An AI attacker tries different tactics, from fake invoices and impersonation to changed wallet addresses.
→ Every payment is verified on-chain through NearBlocks.
→ You get a security score out of 100, alongside specific fixes for the weaknesses discovered.
You can also configure approved payees and test whether your agent can still be manipulated through oversized payments, duplicate transactions or fake spending-limit increases.
And this is where NEAR comes in.
Built on NEAR testnet, Heist uses actual blockchain transactions to verify whether an attack succeeded.
This means the results aren't based on what an agent claims happened. You can inspect the transactions yourself.
We built Heist at @NEARProtocol #NEARHackathon, using NEAR testnet and NEAR AI Cloud.
Try it: heist-sand.vercel.app
What would you test first: impersonation, fake invoices or spending-limit manipulation?
Most agents can follow instructions. But can they recognise when those instructions are being manipulated?
We built Heist to test exactly that.
Heist is an AI agent security testing tool that puts agents through realistic financial scams.
Here's how it works:
→ Paste in your agent's instructions.
→ Heist gives it a temporary wallet funded with test NEAR.
→ An AI attacker tries different tactics, from fake invoices and impersonation to changed wallet addresses.
→ Every payment is verified on-chain through NearBlocks.
→ You get a security score out of 100, alongside specific fixes for the weaknesses discovered.
You can also configure approved payees and test whether your agent can still be manipulated through oversized payments, duplicate transactions or fake spending-limit increases.
And this is where NEAR comes in.
Built on NEAR testnet, Heist uses actual blockchain transactions to verify whether an attack succeeded.
This means the results aren't based on what an agent claims happened. You can inspect the transactions yourself.
We built Heist at @NEARProtocol #NEARHackathon, using NEAR testnet and NEAR AI Cloud.
Try it: heist-sand.vercel.app
What would you test first: impersonation, fake invoices or spending-limit manipulation?
2:41