❌

Normal view

There are new articles available, click to refresh the page.
Today β€” 29 October 2026Main stream

An AI Chatbot for the Apocalypse

29 October 2026 at 07:00

You don’t have to be a full-on β€œprepper” to at least occasionally wonder what would happen if civilization collapsed. One thing you probably couldn’t do is go on the Internet and ask your favorite AI how to purify water, repel zombies, or treat a burn, all of which may be highly relevant depending on your situation. Now, with Survival LLM, you have a chance.

TheΒ  LLM is pretty much the stock chatbot, but it is trained on survival topics, and it runs locally. Naturally, you need the Internet to set it up, so you’d want to do that now before everything hits the fan. The training set uses medical references, survival manuals, FEMA and CDC documents, and nearly a million Wikipedia articles. It includes the survival references in a library and links to them when answering, too.

The installer is small, but it assesses your system and loads a model based on what you have. If you have less than 32 GB of RAM, you’ll get the IBM Granite 4.2 8B model, which was able to correctly answer 14 of 22 test questions. Other models do better, including the NVIDIA Nemotron 3.5 Super model, which got 21 correct, but requires at least 128 GB of memory.

Now, somehow you have to power your computer, but that’s a separate problem. At least there will be plenty of GPUs to scavenge from abandoned data centers. We’ve seen prepper digital libraries before. More than one, in fact.

Best Arkham Intelligence Alternatives in 2026: 7 Tools, 2 Tested on a $26M Hack

29 October 2026 at 07:49

Arkham now puts full wallet history, cross-chain tracing and risk scores behind a paid Enterprise tier. I followed a real $26 million theft with two Bitquery tools, then lined up five moreΒ options.

Arkham’s free plan now shows only the last 100 transactions of any wallet. To see the rest, you need Arkham Enterprise. That paid tier also holds risk scores, case files and tracing from one chain to another. Arkham launched it on 20 October 2026, and its announcement lists noΒ price.

A busy wallet can make 100 transactions in an afternoon. So if you chase stolen funds or check wallets for a compliance team, the free plan now stops early. If that is you, you need an Arkham Intelligence alternative, at least for part of theΒ work.

I wanted a fair test, so I took one real theft and followed it to the end. On 8 January 2026, an attacker took 8,535 ETH from Truebit, an Ethereum project with its own token. That was about $26.4 million at the time. Within 53 hours, all of it had gone into Tornado Cash, a mixer that pools many people’s coins so the trailΒ breaks.

I ran that trail through both Bitquery tools myself. For the other five, I say what each does best and where itΒ stops.

The shortΒ version

  • Bitquery MoneyFlow (lite.bitquery.io): a free, Arkham-style flow chart in your browser. Paste a wallet, pick one of 17 chains, and follow the money one step at aΒ time.
  • Bitquery MCP: for people who work in Claude, ChatGPT or Cursor. Ask in plain English, and the AI pulls live transfers and labels from 19 chains, plus risk scores for Ethereum, Bitcoin andΒ TRON.
  • Nansen: for trading research and β€œsmart money” wallets.
  • Chainalysis Reactor and TRM Labs: what police and large compliance teams buy. Prices come byΒ quote.
  • Dune: for people who write SQL and want dashboards.
  • Etherscan: free, and fine for checking one wallet or one transfer at aΒ time.

Why people look for an Arkham Intelligence alternative

Arkham Intelligence is a blockchain analytics platform, and it built its name on labels. A label is a name attached to a wallet address, such as β€œBinance hot wallet”. Arkham says it holds 3.9 billion β€œattributions”, its word for these labels. Those labels stay free, along with its graph tool, called Visualizer, and its block explorer.

Here is what sits behind Arkham Enterprise on 20Β October:

  • the full transaction history of a wallet, with filters (free users see the 100 most recent transactions)
  • Tracer 2.0, which follows money across bridges, the services that move coins betweenΒ chains
  • the counterparties panel, which shows who a wallet deals withΒ most
  • risk scores and case management
  • creating new customΒ labels

Arkham does give free Enterprise access to some independent investigators and public-interest groups through a grant program. Everyone else has to ask for aΒ price.

The API is gated too, with one exception. You apply through a form, and once Arkham approves you, paid plans start at $100, billed in monthly credits. Arkham also hosts an MCP server, so Claude, Cursor or Codex can query its data, but it needs that API plan or a trial. The exception is for AI agents: about 90 read endpoints sold one call at a time, at $0.20 per credit in USDC, with noΒ account.

I get why Arkham moved full history behind a paywall. Serving full history for every wallet costs money. Still, Arkham keeps one big edge. If your main question is who owns a wallet, its free labels are hard to beat, and nothing on this list replaces them one for one. The tools below compete on history, access and priceΒ instead.

The test case: the $26 million TruebitΒ hack

Truebit sold its TRU token through its own sale program on Ethereum, written in 2021. A math bug in that old code made the price of new TRU come out as zero. The attacker minted TRU for free, sold it back for ETH, and repeated the trick several times in one transaction. Security firm SlowMist put the loss at $26.44Β million.

Here is the trail, as the two Bitquery tools showedΒ it:

  1. 8 January, 16:02 UTC. 8,535 ETH lands in the attacker’s wallet, 0x6C8Eιˆ₯οΏ½2b50 (transaction).
  2. Same day. The wallet splits the money: 4,267 ETH to one new wallet, 4,001 ETH to another. A third payment of 268 ETH follows on 10Β January.
  3. 8 to 10 January. The 4,267 ETH pile hops through three more new wallets. The 4,001 ETH pile makes oneΒ hop.
  4. 10 January. Two final wallets feed Tornado Cash in round amounts of 100, 10, 1 and 0.1 ETH. By 20:52 UTC, 8,535 ETH has gone in, the same amount that wasΒ stolen.

Any tracing tool should answer three questions about a trail like this. Where did the money come from? How did it split? Where did it endΒ up?

1. Bitquery MoneyFlow: visual crypto tracing in yourΒ browser

MoneyFlow is Bitquery’s browser tool for tracing money between wallets. It lives at lite.bitquery.io, and it is free: you only need to sign in with a BitqueryΒ account.

Starting a trace takes fourΒ steps:

  1. Paste anΒ address.
  2. Pick the chain. On 29 October the menu listed 17: Bitcoin, Ethereum, BNB Smart Chain, Polygon, Arbitrum, Base, Optimism, TRON, XRP Ledger, Cardano, Litecoin, Dogecoin, Dash, Algorand, Filecoin, Arc and Robinhood Chain.
  3. Pick the coin or token. MoneyFlow lists every currency the wallet has touched, with the date it lastΒ moved.
  4. Set a date range if you want one, then press Create MoneyFlow.

The result is a flow chart. Money coming in sits on the left, money going out sits on the right, and the width of each band shows the amount. For the Truebit wallet, one green band of 8,535 ETH comes in and splits into red bands of 4,267, 4,001 and 268Β ETH.

Trace Out adds the next step of the trail, and Trace In walks back toward the source. Each step saves a new version of the trace, so you can go back if a step getsΒ messy.

The table under the chart shows Bitquery’s labels next to each address. Both wallets that took the big piles carry the tag hacker-truebit-hacker. Exchange wallets get tagged too. When I traced the Bybit hacker’s wallet from February 2025 the same way, the money came from a Bybit wallet tagged bybit-proof-of-reserves.

The chart also showed something I did not expect. A fan of tiny payments, each worth less than $1, came into the attacker’s wallet from look-alike addresses. One look-alike copies the first and last four characters of a wallet the attacker used, so both read 0x3b58ιˆ₯οΏ½862a in short form. The trick is called address poisoning. Scammers hope you copy the fake address from your history next time, and here they aimed it at the thief. A threshold box above the chart hides payments below any dollar amount youΒ choose.

Two more buttons help when you need to share the work. Generate report turns the trace into a table of every transfer, with full hashes, which you can download as a CSV file. Get API opens the query behind the chart in Bitquery’s GraphQL IDE, so a developer can run itΒ again.

Where it falls short. Solana is not in the chain menu yet. Each trace follows one currency, so if a thief swaps ETH for USDT, you start a second trace. And after a few steps the chart can turn into loops when money flows back into wallets already on it. In the Truebit case, the third step got hard to read, and the table wasΒ clearer.

2. Bitquery MCP: ask your AI assistant to follow theΒ money

MCP, short for Model Context Protocol, is a standard way to plug outside tools into an AI assistant. Bitquery MCP plugs live blockchain data into Claude, ChatGPT, Cursor, VS Code and OpenAIΒ Codex.

Setup is short. Add https://mcp.bitquery.io as a custom connector in your assistant, then sign in with your Bitquery account. There is no API key toΒ paste.

You then get 314 tools. They trace transfers on 19 chains, including Solana, Bitcoin, Ethereum, TRON, the XRP Ledger and Stellar. They also cover DEX trades and prices on 10 chains. Guided prompts handle the common jobs: money_flow follows funds until they reach an exchange or a mixer, and risk_screen returns a LOW, MEDIUM or HIGH verdict with evidence.

I gave Claude the Truebit attacker’s wallet and asked where the ETH ended up. I also asked it to name every wallet on the way and score the last ones for risk. It pulled the transfers hop by hop, looked up the labels and ran a risk check on each finalΒ wallet.

The answer named two exit wallets. The first, 0x7720ιˆ₯59d, got 4,267 ETH after three more hops and sent 4,266.9 ETH to Tornado Cash on 10 January. The second, 0xd841ιˆ₯ξ›ˆ135, got the 4,001 ETH pile plus the 268 ETH payment and sent 4,268.5 ETH to Tornado Cash the same evening. Both scored 100 out of 100 for risk, the top of the scale, mainly because they paid a mixer. The risk check also flagged look-alike poisoning addresses next toΒ both.

MoneyFlow reached the same Tornado Cash address three steps out from the attacker. The MCP got there from one question. Arkham has a hosted connector too, so the real difference is access. Arkham’s needs an approved API plan or trial, while Bitquery’s trial is self-serve and needs noΒ card.

The product page listed three plans on 29 October 2026. The free trial runs 7 days with 100 credits, and it needs no card. Trading MCP costs $19 per month and covers trading data only, with 32 tools and no tracing. AI Investigation MCP, the plan with tracing, costs $149 per month, or $100 per month billed yearly, and includes all 314Β tools.

Where it falls short. On Ethereum the risk check looks one step out from a wallet; on TRON it can look several steps. An AI assistant can also misread a result, so open the transaction hashes it cites before you rely on them. And like MoneyFlow, it follows one chain at a time, so you hop a bridge yourself.

Arkham vs Bitquery at aΒ glance

In words: Arkham’s free plan shows the last 100 transactions per wallet, while MoneyFlow uses whatever date range you set and the MCP pages through the full history. Arkham’s Visualizer stays free, and MoneyFlow draws a flow chart too; the MCP answers inΒ text.

Arkham Enterprise follows money across bridges for you. MoneyFlow and the MCP work one chain at a time. Risk scores come with Arkham Enterprise and with Bitquery MCP, not with MoneyFlow.

Price works differently on each side. MoneyFlow is free with a Bitquery account. Arkham Enterprise lists no price. Its API starts at $100 after approval, or $0.20 per credit pay as you go. Bitquery MCP is self-serve, with a free trial and then $149 per month forΒ tracing.

5 more Arkham alternatives worthΒ knowing

3. Chainalysis Reactor

Best for police, prosecutors and large exchanges. Reactor is Chainalysis’s case graph, and law enforcement uses it widely. There is no public price and no self-serve trial. If you work alone or on a small budget, it is likely out ofΒ reach.

4. TRMΒ Labs

Best for compliance teams and government buyers. TRM sells its Forensics tool for tracing funds across chains, next to its wallet screening tools. Most of it is sold by quote, mainly to largeΒ firms.

5. Dune

Best for analysts who write SQL. Dune lets you query blockchain data and build dashboards, and it has a free tier and its own MCP server. There is no ready-made tracing screen, so you write the queries yourself or let its MCP server writeΒ them.

6. Etherscan

Best for checking one transaction or one wallet for free. Etherscan shows name tags on well known addresses, and it tags the Truebit attacker’s wallet β€œTruebit Exploiter 1”. There is no flow chart, so tracing a trail across many hops means a lot ofΒ tabs.

7. Nansen

Best for trading research. Nansen labels wallets and marks the ones with a strong record as β€œsmart money”. You can then watch what they buy and sell. There is a free tier and a paid Pro plan, plus an API, an MCP server and a command-line tool. Its tools center on trading signals, so it is a weaker fit if you need to build a caseΒ file.

Other Bitquery products for investigators

Bitquery sells three more things for this kind ofΒ work:

  • Coinpath: the money-flow data behind MoneyFlow, sold to companies with full history and bulkΒ export.
  • Crypto investigation service: if you were robbed and would rather hand the work to someone, Bitquery’s team traces the funds. Its page says the first assessment isΒ free.
  • Ethereum datasets: the full history of the chain as files, for teams that want to run their own analysis.

How to choose an Arkham alternative

  • You want Arkham’s look without paying for Enterprise: Bitquery MoneyFlow, which isΒ free.
  • You already work in Claude or ChatGPT: BitqueryΒ MCP.
  • You trade and want smart-money signals:Β Nansen.
  • You work for police or a regulated firm with a budget: Chainalysis Reactor or TRMΒ Labs.
  • You write SQL:Β Dune.
  • You only need to check one transfer: Etherscan.

FAQ

Is there a free alternative to Arkham Intelligence?

Yes. Bitquery MoneyFlow is free with a Bitquery account and traces a wallet over any dates you pick. Etherscan is free for looking up one wallet or transaction at a time, and Dune has a free tier. Bitquery MCP has a 7-day free trial with 100 credits and no card. Arkham itself still has a free plan, but it shows only the last 100 transactions perΒ wallet.

What is the best Arkham alternative for tracing stolenΒ crypto?

For a visual trail, Bitquery MoneyFlow; for asking questions in plain English, Bitquery MCP. For court work with a large budget, Chainalysis Reactor or TRM Labs. I work at Bitquery, so weigh my pick with that inΒ mind.

Does Arkham have anΒ API?

Yes. You apply through Arkham’s API form, and once Arkham approves you, plans start at $100, billed in monthly credits. Some applicants get trial access first. Arkham also hosts an MCP server for AI assistants, and AI agents can pay per call at $0.20 per credit inΒ USDC.

Can AI trace crypto transactions?

Yes, if the assistant is connected to live blockchain data. With Bitquery MCP, Claude followed the Truebit money to Tornado Cash and scored both exit wallets 100 out of 100 for risk. Check the transaction hashes it cites before you act onΒ them.

Can you trace crypto after it goes into TornadoΒ Cash?

Not directly. A mixer pools many people’s deposits, so the link between a deposit and a withdrawal breaks. Investigators match the timing and size of later withdrawals, which is slow and gives odds, notΒ proof.

Try itΒ yourself

Start a trace at lite.bitquery.io, or connect Bitquery MCP to your AI assistant and ask it to follow a wallet. If you want the raw history instead, Bitquery sells the Ethereum dataset asΒ files.


Best Arkham Intelligence Alternatives in 2026: 7 Tools, 2 Tested on a $26M Hack was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

We urgently need to monitor AI agents’ actions in real time

This summer, hundreds of OpenAI agents tried to cheat on a cybersecurity test. They broke out of their test environment and successfully hacked Hugging Face, a site that they believed held clues about how they’d be graded. Around the same time, another OpenAI agent accessed private files from an Australian government website. It’s a problem that’s by no means confined to OpenAI. In the months since, Anthropic, Google, and Meta have also disclosed incidents in which their agents have gone off track. And worryingly, in many cases the agents eluded the very researchers and safety teams tasked with monitoring them.Β 

AI agents are taking unauthorized actions, and the companies building and running them are mostly relying on luck and hindsight to mitigate any harmful impacts. They must do more to ensure safety. That’s why EU regulators and US agencies are rightfully calling for agent developers and deployers to monitor agents in real time. But these rules assume that companies can see what their agents are doing and whyβ€”when in reality, they lack sufficient visibility.Β 

Imagine a bank hiring a thousand new employees who can access customer accounts and sensitive information, but the employees’ ID badges change every day, it’s not clear whether a manager ever reviewed or authorized their work, and nobody logs the changes employees make to approval processes. That lack of visibility is where we are with agents today.

As agents roll out across critical sectors, from finance to government to medicine, we must be able to monitor them in real time to prevent wide-ranging and potentially devastating consequences.Β  And while safety depends on monitoring, monitoring requires observability: the capacity to capture what the system did, process it into signals, and present those to humans or automated oversight systems. In other words, we need to know what the agent did and why it did it. And as our recent research shows, current agent frameworksβ€”the software that runs agentsβ€” do not reliably generate the crucial observability records we need to ensure that agents are deployed safely.

Agents present new kinds of problems that generative AI alone does not. They inherit the unpredictability of the LLMs they are built on, but where a generative AI system produces a single output for a human to act on, an agent performs longer tasksβ€”it plans, picks tools, spawns sub-agents, and takes actions. So an agent’s course can take shape in a multitude of different ways, and no tests before launch can fully anticipate the risks. This makes observing the agents while they work even more challenging, and even more important.

With colleagues from academia, civil society, and industry, we studied the four most widely used agent frameworks to see what signals they actually emit. We found major gaps that made it hard to achieve key safety goals, like noticing policy violations, unauthorized actions, and even human oversight failures. Key observability requirements were missingβ€”like Agent IDs that persist over time, and records about which humans approved agent tasks. This made it hard to tell which agents did what or assess whether they were taking unauthorized actions.Β 

The good news is that these gaps, once identified, can be closed. Doing so starts with capturing two types of records: those that reveal what happened in an agent’s run and how the agent made its decisions. The β€œwhat happened” records identify the agent (while preserving privacy) and log how humans intervened and whether agent permissions or β€œmemory” shifted, while the β€œdecision” records show an agent’s reasoning and levels of confidence in the actions it’s taken.

Take, for example, agents working to process a bank’s mortgage loans. The system examines an application and recommends denying it, and then a human loan officer signs off on the decision. In a later audit, or perhaps even in real time, a bank or regulator needs to be able to reconstruct which agent made the call, which officer approved it, and how long they took. And the bank must also analyze records of how the agent arrived at its refusal decision in order to ensure it did not use off-limits information, like details about the neighborhood the applicant is from.

Recording β€œwhat happened” and β€œhow the agent decided” require different approaches, but both are feasible. The current lack of β€œwhat happened” records is mostly a software plumbing problem that can be addressed through OpenTelemetry, an open observability standard maintained by engineers across the industry and by the agent frameworks adopting it.

OpenTelemetry has launched a working group drafting shared formats for tracing agents, but they have yet to be finalized. The group should urgently incorporate standards for maintaining persistent agent identity and for recording human interventions and changes to agents’ permission or memory. And it should be done before these systems can scale, all the while attending to the privacy implications of agent ID that links to real people.

Preserving β€œhow agents decided” records is more challenging. The issue raises open research questions for model providers and researchers: Does the step-by-step reasoning a model displays, known as chain of thought, reflect how the model actually made a decision? And do we have reliable ways to measure how confident the agent is in that decision? These questions need answers before anyone sets standards for how such observability records are used.

No single organization or sector can close the observability gaps on their own, but together, they can support the infrastructure required to prevent dangerous incidents and support safety.Β 

AI developers building agent frameworks, like OpenAI, Anthropic, CrewAI, and LangChain, must integrate telemetry signals recording an agent’s persistent identity, any human interventions, and any changes to an agent’s permissions and memory. Meanwhile, enterprises adopting these agent frameworks have an influential role to play; enterprises in regulated industries, like banks and hospitals, can put pressure on the agent developers to supply these missing observability records where standards do not yet exist.

Enterprises must also define policies, permissions, and roles that set out what agents can safely do, since telemetry alone cannot assess whether agents broke specific rules. Finally, regulators and AI standards institutes must specify the observability records required for high-stakes AI deployments while leaving the technical details to industry. We have already seen initial momentum here: NIST’s agent standards initiative in the US is working on agent identity, one of the most salient gaps we found in our research.Β 

No bank would let a thousand unbadged employees loose on customer accounts and hope to piece together what happened when something goes wrong. Yet that’s how we’re deploying AI agents. Making their behavior observable is the first step toward fixing this. And by building the regulatory and policy ecosystem that makes it possible to act on what we see, we can hold organizations accountable.Β Until then, every task we hand to an agent hands over our agency, too.

Madhulika Srikumar is the Head of the AI Safety Program at the Partnership on AI, a global non-profit partnership of leading industry, academic, and civil society organizations, advancing best practices in AI governance.

Claire Leibowicz is theΒ Director of AI, Trust, and Society at the Partnership on AI and a doctoral candidate at Oxford University.

Top AI Risks in Mobile Apps: What Businesses Need to Know

29 October 2026 at 02:35

Artificial intelligence is becoming a part of mobile applications through features such as conversational assistants, personalized recommendations, predictive analytics, image recognition, and automated decision-making. These capabilities can improve how users interact with apps, but they also introduce risks related to data privacy, security, accuracy, fairness, and regulatory compliance. Businesses need to understand these risks before integrating AI into their mobile products.

Unlike conventional application features, AI-powered functionality can produce unpredictable outputs, rely on sensitive user information, and depend on external models or services. For businesses, these factors can affect user trust, operational reliability, development budgets, and legal responsibilities. Understanding the potential risks helps decision-makers evaluate the implications of AI adoption and make informed choices about its role in their mobile applications.

Why AI Introduces New Risks in Mobile Apps?

Traditional mobile applications generally follow predefined rules and programmed workflows, whereas AI-powered features may generate responses, identify patterns, or make predictions based on model outputs. Their behavior can vary depending on the input, available context, training data, and model configuration. This variability creates additional risks that businesses must consider alongside conventional application security and performance requirements.

AI features can also introduce new data flows between mobile devices, backend systems, external APIs, and third-party model providers. Each connection can affect how information is processed, stored, accessed, and protected. These considerations extend across the mobile app development life cycle, from defining requirements and selecting AI capabilities to testing the application and maintaining it after release.

The level of risk depends on how AI is used within the application. A recommendation feature may primarily raise concerns about data privacy and biased results, while an AI assistant with access to personal records or transactional functions may create more serious security and reliability concerns. Businesses therefore need to evaluate AI risks in the context of their application’s functionality, users, data sensitivity, and potential consequences of incorrect outputs.

Major AI Risks in Mobile Apps

AI risks in mobile apps vary according to the type of model, the information it processes, and the decisions or actions it can influence. Some risks affect individual users, such as exposing personal information or generating misleading responses, while others can disrupt business operations, increase costs, or create legal liabilities. Understanding these risk categories helps businesses evaluate the potential consequences of integrating AI into their applications.

Data Privacy and Sensitive Information Exposure

AI-powered mobile apps may process personal details, location information, financial records, health data, voice recordings, images, and user conversations. If this information is collected unnecessarily, retained longer than required, or transmitted to external AI providers without adequate safeguards, it can expose users to privacy violations and unauthorized data disclosure.

For example, an AI assistant integrated into a healthcare app might receive patient details to generate personalized responses. If the application sends identifiable medical information to an external model without appropriate data handling controls, that information could be exposed beyond its intended use. Similar concerns arise when apps use conversation histories, behavioral data, or device permissions to personalize AI-generated experiences.

Privacy risks also depend on how data is stored, reused, and accessed across the application ecosystem. Businesses must consider user consent, data minimization, retention policies, access restrictions, and the privacy practices of third-party providers. Poor data governance can undermine user confidence and expose the organization to regulatory consequences.

Security Vulnerabilities and AI-Based Attacks

AI integration introduces security concerns beyond conventional mobile app vulnerabilities. Attackers may exploit weaknesses in model-connected APIs, manipulate AI instructions through prompt injection, abuse exposed credentials, or attempt to extract sensitive information from model interactions. The risks become more significant when an AI feature can access internal databases, user accounts, or application functions without sufficient restrictions.

Consider a mobile app with an AI assistant that retrieves account information or performs actions on behalf of users. If the assistant fails to distinguish trusted instructions from malicious input, an attacker may attempt to manipulate its behavior or obtain information they are not authorized to access. Weak backend authorization can make the consequences more serious, even when the AI model itself is functioning as designed.

The application’s mobile app technology stack can influence its overall exposure, particularly when it includes third-party SDKs, AI APIs, authentication services, and external libraries. However, selecting appropriate technologies alone does not guarantee security. Effective protection also depends on secure API design, server-side authorization, secret management, input handling, and testing of AI-specific attack scenarios.

AI Hallucinations and Inaccurate Outputs

Generative AI models can produce responses that sound convincing but contain fabricated facts, outdated information, incorrect calculations, or unsupported recommendations. These errors, commonly called hallucinations, can become a serious concern when users rely on AI-generated information to make decisions. Even a well-designed application cannot assume that every model response is accurate.

For instance, an AI-powered financial app might provide an incorrect explanation of an investment product, while a health app could generate misleading information about symptoms or medication. In customer support applications, inaccurate responses about refunds, subscriptions, or account policies can create confusion and increase support costs. The consequences depend on the sensitivity of the task and the degree of user reliance on the generated output.

Accuracy risks can increase when models operate with incomplete context, rely on outdated data, or interpret ambiguous prompts incorrectly. Businesses should distinguish between low-impact features, such as generating casual suggestions, and high-impact use cases where incorrect information could cause financial, medical, legal, or other material harm. The latter require stronger validation and appropriate human oversight.

Algorithmic Bias and Unfair Decisions

AI systems can reproduce or amplify biases present in their training data, historical records, or model design. As a result, recommendations, predictions, classifications, and automated decisions may produce systematically different outcomes for certain groups of users. These problems can arise even when an application does not explicitly use sensitive personal attributes.

For example, a recruitment app that uses AI to rank candidates may disadvantage qualified applicants if its model reflects biased historical hiring patterns. A lending app could produce unfair credit-related recommendations, while a shopping app might repeatedly recommend limited product options to certain users based on misleading behavioral assumptions. Such outcomes can affect accessibility, user experience, and perceptions of fairness.

Bias is difficult to identify when businesses evaluate AI systems only through average accuracy scores. Testing should also consider performance across relevant user groups, the quality and representativeness of the data, and the consequences of different types of errors. Unidentified bias can damage customer trust and create compliance or reputational concerns, particularly when AI influences high-impact decisions.

Lack of Transparency and User Trust

Some AI models operate in ways that make their outputs difficult to explain in straightforward terms. Users may not understand why an application recommended a product, flagged an activity, generated a particular response, or made a prediction about their behavior. When AI influences important outcomes without adequate explanation, users may struggle to assess whether the result is reliable or appropriate.

This issue can affect mobile applications that provide personalized pricing, automated moderation, financial recommendations, or eligibility assessments. If a user receives an unexpected decision and cannot understand the factors behind it, they may question the application’s fairness and the business’s handling of their information. Unclear disclosures about AI-generated content can also lead users to mistake automated responses for verified facts or professional advice.

Transparency does not require every AI model to expose its internal technical workings. It requires businesses to communicate when AI is being used, explain its role in relevant decisions, identify important limitations, and provide suitable ways to question or escalate outcomes. Clear communication helps users form realistic expectations about what an AI-powered mobile app can and cannot do.

Legal, Regulatory, and Compliance Risks

AI-powered mobile applications may be subject to data protection laws, consumer protection requirements, sector-specific regulations, and emerging AI governance rules. The applicable obligations depend on factors such as the app’s market, the types of information it processes, its intended purpose, and the potential impact of its automated decisions. Integrating a third-party AI model does not automatically transfer all compliance responsibilities to the provider.

For example, a mobile app that processes health information or uses personal data to generate behavioral profiles may need to meet specific requirements for lawful processing, transparency, consent, security, or data subject rights. Applications operating in regulated sectors may face further obligations when AI influences medical, financial, employment, or other consequential decisions.

Intellectual property can create another area of legal uncertainty. AI-generated text, images, audio, or other content may raise questions about ownership, licensing, training data, and the use of protected material. Businesses that overlook these issues may face disputes, content restrictions, or unexpected compliance costs. Requirements should therefore be evaluated according to the relevant jurisdictions and the application’s actual use of AI.

Performance, Reliability, and Cost Overruns

AI features can increase an application’s dependence on network connectivity, backend infrastructure, external model providers, and computational resources. Large model requests may introduce latency, while service outages, rate limits, or changes to an external API can interrupt important features. On mobile devices, additional processing can also affect battery consumption, memory usage, storage, and responsiveness, particularly when models run locally.

Costs can also become difficult to predict when an application relies on usage-based AI services. Expenses may increase as user activity grows, prompts become longer, models process larger amounts of context, or additional monitoring and infrastructure become necessary. Applications that require frequent model calls or real-time responses can face a substantial difference between initial estimates and ongoing operating expenses.

These costs extend beyond initial implementation and may include model evaluation, service integration, performance optimization, infrastructure management, and recurring updates. The AI app development cost can therefore differ considerably from the long-term cost of operating and maintaining the application. Businesses need to consider usage patterns, service dependencies, response-time requirements, and growth projections when evaluating financial feasibility.

Third-Party AI Dependencies and Intellectual Property Risks

Many mobile applications rely on external AI providers for language models, image generation, speech recognition, recommendation systems, or other intelligent features. These dependencies can reduce the need to build every capability internally, but they also introduce risks related to provider availability, pricing changes, model updates, data handling policies, and service discontinuation. A change in an external service can affect the application’s functionality even when its own code remains unchanged.

Third-party dependencies may also complicate incident investigation and accountability. Businesses might have limited visibility into how an external model was trained, how its behavior changes between versions, or how submitted data is processed. If a provider changes its retention policy, introduces a new usage restriction, or retires an API, the business may need to revise its data practices or modify application features.

Intellectual property concerns can arise when AI-generated content incorporates protected material, when users submit copyrighted assets for processing, or when a business uses models under licensing terms that restrict particular commercial applications. The extent of these risks depends on the provider’s terms, the content involved, and the applicable law. Businesses should review provider agreements, understand data usage provisions, and consider contingency plans for critical AI services.

How AI Risks Affect Mobile App Users and Businesses?

The consequences of AI risks depend on an application’s purpose, the sensitivity of the information it handles, and the level of trust users place in its outputs. A minor recommendation error may have little impact, while a privacy breach, biased decision, or misleading response in a high-impact application can cause substantial harm. Businesses need to consider both immediate technical consequences and the longer-term effects on users, operations, and customer relationships.

The impact of AI-related risks generally falls into the following areas:

Impact on Mobile App Users

AI-related failures can affect users’ privacy, decision-making, and confidence in an application. Common consequences include:

  • Loss of privacy: Exposure or misuse of personal information can reduce users’ control over how their data is collected and processed.
  • Misleading information: Inaccurate AI-generated responses or recommendations can lead users to make poorly informed decisions.
  • Unfair treatment: Biased algorithms can produce unequal recommendations, classifications, or outcomes for different groups of users.
  • Reduced trust: Unexpected AI behavior, unclear data practices, or repeated errors can discourage users from engaging with AI-powered features.
  • Potential harm: Errors in healthcare, financial, or other high-impact applications can have consequences beyond a poor user experience.

Impact on Businesses

For businesses, AI risks can affect financial performance, regulatory obligations, operational continuity, and brand reputation. The potential consequences include:

  • Financial losses: Incident response, legal expenses, compensation, and unexpected AI service usage can increase business costs.
  • Reputational damage: Publicized privacy violations, biased decisions, or unreliable AI outputs can weaken customer confidence.
  • Regulatory consequences: Mishandling personal data or failing to meet applicable AI-related obligations can lead to investigations, penalties, or corrective requirements.
  • Operational disruption: Model failures, external service outages, and security incidents can interrupt important app features and business processes.
  • Higher support and maintenance costs: Employees may need to correct AI-generated errors, investigate complaints, and address recurring technical problems.
  • Reduced user retention: Repeated errors or concerns about data handling can discourage customers from continuing to use the application.

How AI Risks Can Compound

AI-related problems do not always occur in isolation. A single incident can create several connected consequences for users and businesses. For example, if an AI assistant exposes customer information, the incident may trigger a security investigation, increase remediation expenses, damage customer confidence, and raise questions about regulatory compliance.

Similarly, biased recommendations can lead to unfair user experiences, complaints, reduced engagement, and potential legal or reputational concerns. The overall impact depends on the nature of the failure, the number of users affected, the sensitivity of the information involved, and the effectiveness of the business’s response.

Businesses should therefore evaluate AI risks according to their application’s intended purpose and the potential consequences of failure, rather than focusing only on the sophistication of the underlying technology. Understanding how these risks affect users and business operations provides a clearer basis for making informed AI adoption decisions and setting realistic expectations for mobile app reliability.

Conclusion

AI introduces new possibilities for mobile applications, but it also creates risks involving data privacy, security, accuracy, fairness, compliance, and operational reliability. The severity of these risks depends on how AI is integrated, what information it processes, and how much users and business operations rely on its outputs. Understanding these factors helps businesses make informed decisions about where and how to use AI in their mobile products.

For businesses, the challenge is not simply to identify potential AI failures but to understand their consequences for users, operations, and long-term trust. Considering these risks alongside application requirements, technology choices, and ongoing operational costs provides a clearer basis for evaluating AI-powered mobile app initiatives. As AI capabilities continue to evolve, risk awareness will remain an important part of responsible mobile app development.

The post Top AI Risks in Mobile Apps: What Businesses Need to Know appeared first on TopDevelopers.co.

Yesterday β€” 28 October 2026Main stream

Creating AI value with enterprise context

Across a business, any number of AI platforms, systems, and tools may be at work simultaneouslyβ€”for example, AI-powered customer platforms, conversational assistants, and workflow and process automation tools. Each one is sophisticated, advanced, and quick to respond. But, when set to work, the outcomes and actions that emerge may be wrong, confused, or lacking a proper understanding of the business. Many organizations find themselves in this situationβ€”and it could be one of key reasons they struggle to extract returns on their AI investments.

An MIT Technology Review Insights poll finds that while every organization surveyed is using AI today to some degree, fewer than one in five (16%) are extracting transformative value from their deployments. The largest percentage of respondents (40%) say they are seeing moderate gains in specific tasks or teams, while 21% report meaningful gains, leaving 23% that are seeing minimal returns or none at all.

Companies are mostly still piloting AI use cases (according to 38% of respondents) or using it to assist employees’ work with tools like co-pilots or chat assistants (35%). Just 12% of enterprises have AI agents in production and 3% say they are using AI to do most of the work in key processes.

β€œThere’s a big gap between what the models are capable of and how the models are actually being useful inside organizations,” says Prukalpa Sankar, co-founder of Atlan. β€œFor every real-life intent and purpose, artificial general intelligence is already here. It’s just not really useful in most companies today.”

The missing layer, Sankar says, is context, or how well AI understands a business. A context layer is the architectural infrastructure that sits between an organization’s business systems (for example, systems of record and data, and its AI platforms). It translates enterprise intelligence into governed, machine-usable context for AI agents or models and helps knowledge compound. β€œWithout a context layer for AI, it’s almost like you’re hiring the smartest intern in the world, blindfolding them, and throwing them into your organization,” Sankar says.

Download the report

This content was produced by Insights, MIT Technology Review’s custom content arm, not its editorial staff. It was researched and written by humans, with any AI tools that may have been used limited to production processes under human oversight.

Google announces Gemini 4 Carbon, its latest frontier AI model that you can't use

28 October 2026 at 14:47

It's almost like Google's got something to prove after taking a break from releasing new frontier AI models earlier this year. Just two weeks after rolling out Gemini 4 Argon, Google has announced Gemini 4 Carbon. This isn't the Flash model equivalent we've been waiting for but, rather, is an improvement on Argon, and like that model, Google is working on a staged release that could take a while.

Stop me if you've heard this one before: Google says its latest AI model reaches a new threshold in coding, agentic tasks, and scientific analysis. It's so capable, in fact, that Google can't let you use it just yet.

Gemini 4 Carbon reportedly makes big gains in cybersecurity applications. Google says the model shows a "significant leap" in vulnerability detection, validation, and remediation. Carbon is also apparently twice as likely to generate code that is free of vulnerabilities versus Argon. Meanwhile, the Chrome team claims that Carbon is 10 times better at generating "high-quality" patches compared to non-Google models. Google also notes that Carbon has increased its score by 89 points on WebDev Arena, now ranking at number four on the leaderboard.

Read full article

Comments

Β© Aurich Lawson

Google’s Gemini 4 Carbon is built for complex coding and cybersecurity tasks

28 October 2026 at 15:59
Google's Gemini 4 Carbon targets complex coding and cybersecurity tasks, with the company touting stronger secure coding, fewer AI mistakes, and impressive benchmark results.

Netherlands Plans 25,000 Job Cuts as Government Turns to AI

28 October 2026 at 14:28

The Netherlands plans 25,000 government job cuts as it explores AI savings. See the 2027 timeline and steps for Dutch and EMEA public-sector IT teams.

The post Netherlands Plans 25,000 Job Cuts as Government Turns to AI appeared first on TechRepublic.

Netherlands Plans 25,000 Job Cuts as Government Turns to AI

28 October 2026 at 14:28

The Netherlands plans 25,000 government job cuts as it explores AI savings. See the 2027 timeline and steps for Dutch and EMEA public-sector IT teams.

The post Netherlands Plans 25,000 Job Cuts as Government Turns to AI appeared first on TechRepublic.

Google Unveils Genie 4 With Native Audio and Real-Time World Editing

28 October 2026 at 10:59

Google’s Genie 4 adds native audio and real-time world editing. Learn about access, US pricing, and the limits teams should assess before running a pilot.

The post Google Unveils Genie 4 With Native Audio and Real-Time World Editing appeared first on TechRepublic.

Opera's WebAI brings local AI models to supported browsers, offering develo…

28 October 2026 at 10:41

Opera's WebAI brings local AI models to supported browsers, offering developers new options while raising questions about privacy and device requirements.

The post appeared first on TechRepublic.

❌
❌