<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Plusnineone Security Insights</title>
    <link>https://www.plusnineone.xyz/</link>
    <description>CCSS audits, custody security analysis, and readiness assessments for exchanges, custodians and wallets.</description>
    <language>en-us</language>
    <lastBuildDate>Thu, 13 Aug 2026 10:45:00 +0000</lastBuildDate>
    <atom:link href="https://www.plusnineone.xyz/rss.xml" rel="self" type="application/rss+xml" />
    <image>
      <url>https://www.plusnineone.xyz/logo.png</url>
      <title>Plusnineone Security Insights</title>
      <link>https://www.plusnineone.xyz/</link>
    </image>

    <item>
      <title>Cloudflare's x402: Agents With Wallets &amp; New Attack Surfaces</title>
      <link>https://www.plusnineone.xyz/insights/cloudflare-x402-agents-wallets</link>
      <guid isPermaLink="true">https://www.plusnineone.xyz/insights/cloudflare-x402-agents-wallets</guid>
      <pubDate>Thu, 13 Aug 2026 00:00:00 +0000</pubDate>
      <description><![CDATA[Cloudflare's x402 lets AI agents hold and spend stablecoins autonomously. How the architecture works, where the security gaps are, and what builders should do before going live.]]></description>
    </item>

    <item>
      <title>The Agent in the Vault: Securing AI in Crypto Custody</title>
      <link>https://www.plusnineone.xyz/insights/ai-agents-in-crypto-custody</link>
      <guid isPermaLink="true">https://www.plusnineone.xyz/insights/ai-agents-in-crypto-custody</guid>
      <pubDate>Sat, 01 Aug 2026 00:00:00 +0000</pubDate>
      <description><![CDATA[Where AI agent authority sits in custody workflows, why human-centric custody controls fall short, and the controls that are emerging.]]></description>
    </item>

    <item>
      <title>The COLDCARD Fiasco: When Randomness Is Not Random Enough</title>
      <link>https://www.plusnineone.xyz/insights/coldcard-rng-vulnerability</link>
      <guid isPermaLink="true">https://www.plusnineone.xyz/insights/coldcard-rng-vulnerability</guid>
      <pubDate>Sun, 02 Aug 2026 00:00:00 +0000</pubDate>
      <description><![CDATA[A build config error left COLDCARD seeds with as little as 40 bits of entropy. How BIP-39 entropy works, what broke, what to do now, and what CCSS requires of key generation.]]></description>
    </item>

    <item>
      <title>IkonPay Key Compromise Protocol: From Assessment to Response</title>
      <link>https://www.plusnineone.xyz/insights/ikonpay-kcp</link>
      <guid isPermaLink="true">https://www.plusnineone.xyz/insights/ikonpay-kcp</guid>
      <pubDate>Wed, 01 Jul 2026 00:00:00 +0000</pubDate>
      <description><![CDATA[A companion to the IkonPay assessment: a complete, implementation-ready KCP with six response tracks built for a specific custody architecture.]]></description>
    </item>

    <item>
      <title>Key Compromise Policies under CCSS v9: What Auditors Actually Expect</title>
      <link>https://www.plusnineone.xyz/insights/key-compromise-policy</link>
      <guid isPermaLink="true">https://www.plusnineone.xyz/insights/key-compromise-policy</guid>
      <pubDate>Mon, 01 Jun 2026 00:00:00 +0000</pubDate>
      <description><![CDATA[A practitioner's guide to Aspect 2.04: the key material inventory, documented response procedures, rehearsals, and how a defensible KCP holds up under audit.]]></description>
    </item>

    <item>
      <title>IkonPay CCSS Readiness Assessment: A Mock Audit</title>
      <link>https://www.plusnineone.xyz/insights/ikonpay</link>
      <guid isPermaLink="true">https://www.plusnineone.xyz/insights/ikonpay</guid>
      <pubDate>Sun, 01 Feb 2026 00:00:00 +0000</pubDate>
      <description><![CDATA[A full audit-style CCSS assessment around a fictional custody environment called IkonPay Custody, demonstrating how a serious CCSS engagement works in practice.]]></description>
    </item>

    <item>
      <title>Single-Signer Wallets Under CCSS: When They Are Acceptable and How To Defend Them</title>
      <link>https://www.plusnineone.xyz/insights/single-signer-wallets</link>
      <guid isPermaLink="true">https://www.plusnineone.xyz/insights/single-signer-wallets</guid>
      <pubDate>Thu, 01 May 2025 00:00:00 +0000</pubDate>
      <description><![CDATA[A deep dive into how CCSSv9 treats single-signer hot wallets, what auditors expect, and how to build a defensible case for leadership and regulators.]]></description>
    </item>

  </channel>
</rss>
