Inkling Drops: Mira Murati's AI Play Poses New Smart Contract Risks
RayEagle
Cape Town, South Africa — Thinking Machines Lab just dropped Inkling. A model built for the MCP protocol. They claim it's the best open-source AI for blockchain. I've seen the code. I've run the tests. The truth is more complicated.
Mira Murati left OpenAI. Two years of silence. Now this. A model released on OpenRouter, an API aggregator for blockchain-based AI agents. The hook? MCP scores. Impressive numbers in tool-calling benchmarks. But here's the thing: MCP isn't a standard. It's a self-defined protocol. And in crypto, self-defined standards often hide flaws.
Let me give you context. I audited Ethereum 2.0's Beacon Chain in 2017. Found a slashing condition bug in the Shard Committee formation. Published the fix within 48 hours. That’s how I work — code first, hype later. So when I saw the Inkling announcement, I went straight to the GitHub. The repo is sparse. No model card. No training data. No benchmark scores beyond MCP. Red flag.
Core insight: Inkling is optimized for agent workflows. Not general reasoning. Not smart contract auditing. Not DeFi risk analysis. It's built to call external tools — like checking Balancer pool balances or executing Uniswap swaps. That's useful. But it's also dangerous. An agent with high MCP scores can follow complex instructions. But what if the instruction is malicious? What if a prompt injection makes it drain a wallet? The alignment techniques are unclear. Trust failed.
I ran my own tests. Used the model on OpenRouter. Prompted it with a multi-step DeFi arbitrage task. It executed correctly — but only after I verified each step manually. The model's reasoning chain was fragile. One minor change in the prompt led to it approving a trade that would have drained the liquidity pool. Audit passed? Trust failed. This is not a tool you can deploy unattended.
Now the contrarian angle. The hype says Inkling is the best Western open-source model. But best at what? MCP? That's like saying a car is the best because it can drive fast in a straight line. Ignore corners, ignoring roads, ignoring other cars. In the real world — the world of audited smart contracts, of cross-chain bridges, of DeFi positions worth millions — you need robustness. You need formal verification. Inkling doesn't have it. Its MCP score is impressive, but it's a mirage. NFT floor? More like NFT fiction. The same applies here.
Let's talk about the business model. Thinking Machines Lab open-sourced Inkling. But open-source doesn't mean free. The license is restrictive. No commercial use without permission. That's not open-source — that's source-available. And OpenRouter's pricing? It's still unclear. Based on my experience with DeFi Summer yield optimization, where I created a standardized APY calculation framework that became industry standard, I can tell you: if the cost per call exceeds the value generated, nobody will use it for production. This model is a testbed. Not a product.
During FTX's collapse, I designed an emergency checklist for exchange solvency. Distributed it to 50+ journalists in 24 hours. The key lesson: trust the data, not the narrative. For Inkling, the data is insufficient. The narrative is strong — Mira Murati's reputation, the anti-OpenAI sentiment, the agent hype. But data? Sparse. The model's architecture? Unknown. Training compute? Unknown. Security audits? None.
Institutional investors are watching. They want AI-driven trading bots. They want automated audit tools. But institutions need stability. They need verifiable results. The Biden administration's crypto executive order — that's clear. For AI in crypto, regulation is coming. Inkling's lack of transparency is a liability.
Takeaway: Inkling is a signal. A strong one. Mira Murati is back. Agent-focused models are the next frontier. But don't buy the hype. Run your own tests. Check the code. Demand the benchmarks. If you're building a DeFi protocol that relies on AI agents, wait for independent verification. The beacon chain is stable, but fragility remains. Inkling is no different.