Cinder Security is an AI red team research firm. Published research, disclosed vulnerabilities, and 5 AI scenarios cleared at HTB GCSB 2026.
A measurement study of industrial deployment patterns on Solana memecoin launchpads.
Over an 89-hour continuous observation window, we captured every launch on Pump.fun: 42,562 tokens from 12,926 unique creator addresses. The paper describes what the data shows about industrial-scale deployment patterns, and what it does not — explicitly listing the hypotheses the observational data cannot validate.
Distribution of the 12,926 creator addresses observed during the 89-hour window, grouped by launch volume tier. Blue bar: share of creator addresses. Orange bar: share of launches produced.
Global Cyber Skills Benchmark 2026 — 15–20 May. Team Cinder Security ranked 337 of 589 teams with 4,700 points across 6 solved challenges.
Selected vectors from AI-related scenarios cleared during the event.
PyTorch model with behavioral backdoor. 26 trigger images produced class predictions 0–127 that decoded to ASCII. Weights carried the payload; the model looked clean.
torch ZIP supply chain compromise: PickleScan reported the artifact safe, torch.load executed the payload anyway. Full SIEM compromise through a poisoned sensor model.
Compliance agent trusted fabricated tool observations without authenticating the tool response. Agent reasoned faithfully over spoofed data.
RAG broken access control chained into charting agent prompt injection, culminating in Python exec via generated chart code.
Coordinated disclosures with acknowledgement from the affected vendors.
Cinder Security is founded and operated by Esteban Ramos Castellanos from Zapopan, México. We focus on adversarial ML, LLM security, and on-chain autonomous system risks.
Cinder is Spanish-first for LATAM clients, and publishes in English for the broader research community. All research is reproducible against public datasets.
We are currently pursuing ISO/IEC 42001 Lead Auditor certification, with audit services planned for Q1 2027.