Payward Joins Anthropic's AI-Powered Cybersecurity Initiative
Kraken's parent company, Payward, has joined Anthropic's Project Glasswing to leverage AI-powered cybersecurity. This move brings a new approach to security posture for cryptocurrency exchanges, aiming to automate vulnerability hunting.
The traditional method of relying on human red teams, third-party auditors, and bug bounty submissions has its limitations. These methods are periodic, scheduled, or dependent on outside researchers' time, making it challenging to find issues before they are exploited.
Project Glasswing's model can probe code, dependencies, and configuration surfaces continuously, shifting the economics of finding issues. This shift is crucial for Kraken, as the exchange operates custody infrastructure, trading systems, and a retail front end, representing distinct attack surfaces.
The open-source aspect of Project Glasswing may be just as significant as the model itself. If findings are shared beyond Payward, it can speed remediation for other firms relying on similar components. However, the disclosure channel is unclear, which might imply a different risk appetite from exchange operators who prefer quiet fixes or narrow responsible-disclosure programs.