Donut

Donut is an AI-native crypto browser that embeds an intelligent agent (D0) directly into the browsing experience. Its core value proposition is transforming the browser from a passive tool into an active trading copilot. D0 continuously monitors market conditions, detects signals, assesses risks, and can execute on-chain transactions based on user-defined rules. The primary market pain point it addresses is the complexity and information overload of traditional trading interfaces, which require constant manual attention. Donut aims to streamline this by offering real-time analysis, automated strategy execution, and a unified interface for both market intelligence and transaction actions. In the past six months (March to September 2026), Donut held the first public demo of D0 in Hong Kong on March 27, showcasing its live trading loop and GRPS risk control system (stop-loss, position limits, drawdown controls). However, a significant security disclosure in June 2026 revealed that out of 49 identified vulnerabilities, only 11 were fully fixed, with 29 remaining unaddressed (including critical issues). The most severe findings included a potential 1-click silent transaction chain that could bypass user approval, and a Pod RCE in the D0 agent environment. The disclosure also noted that the official documentation's claim that 'all transactions require your approval' could be circumvented, and that the final line of defense against unauthorized transfers relied on a third-party signature service (Turnkey) rather than Donut's own backend controls.