DoGNAVY CyberGym Technical Report
DoGNAVY is a joint AI security harness by deepsec@DARKNAVY and independent security researchers based in Shanghai. In a full CyberGym Level 1 evaluation, it passed 1,369 of 1,507 tasks (90.84%). CyberGym Level 1 …
RESEARCH BLOG
Recent technical publications and long-form security research from DARKNAVY.
Patch In, Exploit Out: How deepsec Reconstructed the Pwn2Own Microsoft Edge Sandbox Escape
On May 14, 2026, security researcher Orange Tsai demonstrated a Microsoft Edge sandbox escape at Pwn2Own Berlin, one of the world’s premier hacking competitions. He was the only contestant to win the browser category, …
deepsec: Chasing Mythos with Open-Source LLMs
deepsec, powered by DARKNAVY On April 7, Anthropic introduced Claude Mythos Preview. The announcement quickly drew attention from the AI industry, the security community, and even Wall Street. The framing was unusually …
The Biometric AuthToken Heist: Cracking PINs and Bypassing CE via a Long-Ignored Attack Surface
Modern Android devices make biometric authentication feel routine: a touch, a glance, and the device accepts that the user is present. Underneath that convenience is a security boundary that is easy to underestimate. …
When an AI Assistant Becomes Part of the Hacker’s Attack Chain | Security Analysis of Doubao Phone
When a phone starts “taking action” on its own, it’s no longer just answering questions like how to get a cheaper takeout—it can actually open apps, compare prices, and place orders. Control shifts from the user’s …
How And Why We Hacked Cypherock Hardware Wallet: The Full Story
On blockchains, whoever controls the private key to an address controls the funds in the corresponding account. In October 2025, the U.S. government announced the seizure of 127,000 BTC from Prince Group. On‑chain …
Argusee: A Multi-Agent Collaborative Architecture for Automated Vulnerability Discovery
As we envisioned in DARKNAVY INSIGHT | The Most Imaginative New Applications of 2024: The next generation of AI agents will have excellent reasoning and generalization abilities and be skilled at using a variety of …
If the Person Who Finds a Web3 Hardware Wallet is a Hacker
In 2024, Web3 security incidents caused by private key leaks have surged, resulting in estimated financial losses exceeding $855 million. Private keys function as the sole credentials for blockchain accounts, controlling …
A First Glimpse of the Starlink User Ternimal
I think the human race has no future if it doesn’t go to space. —— Stephen Hawking Starlink is a low Earth orbit (LEO) satellite internet service provided by SpaceX. Users connect to near-Earth orbit satellites through …
Fatal Vulnerabilities Compromising DJI Control Devices
As logistics drones weave through buildings and surveying equipment delineates urban landscapes, the capillaries of the low-altitude economy are sketching the future with millimeter-level precision. DARKNAVY consistently …
