Tencent’s WorkBuddy now commands 790,000 skills and a DAU/MAU ratio that rivals Slack. Their WeChat AI agent “Xiao Wei” can generate mini-programs from natural language. The market reacted with a 5% stock surge. Yet the only transaction trace I see is a centralized black box feeding 1.4 billion users into a model whose weights are secret. This is not a blockchain. It is a fortress.
Context: The Narrative Reversal
Bitget’s recent deep-dive painted Tencent’s AI push as a pivot from model-laggard to ecosystem-leader. Huayuan 3 powers 131 products. Token usage grew 10x. WorkBuddy’s ground-level deployment via WeChat mini-programs bypasses traditional enterprise SaaS complexity — a brilliant engineering feat. Goldman Sachs warns of 5-17% profit erosion from inference costs. JP Morgan dreams of ¥126B incremental revenue by 2030. The numbers are seductive. But no one asks: who owns the execution state?
Core: The On-Chain Detective’s Autopsy
I spent last weekend tracing the logic of “Xiao Wei’s” mini-program generation. You cannot. There is no public bytecode. No verifiable state root. No slashing condition if the agent issues a fraudulent transaction. The security analysis in the source article flags instruction hijacking, data leaks, and fraud. These are not bugs; they are features of a centralized architecture. Tracing the ghost in the smart contract state is impossible when there is no smart contract — only a proprietary model behind a firewall.
Tencent’s cost advantage over decentralized AI is real today, but it relies on opaque inference. Cold storage is a warm lie if the key leaks. Here the key is the model’s weight set. If a malicious actor compromises Tencent’s internal API, every mini-program generated by “Xiao Wei” becomes a potential attack vector. Flash loans don’t exist inside WeChat, but flash exploits do: an agent instructed to “send ¥100 to this address” could drain wallets faster than any smart contract hack, because there is no on-chain governance to pause or reverse.
WorkBuddy’s 790,000 skills are a centralized skill mill. Every integration — Tencent Docs, Meetings, 30+ external tools — funnels through a single point of failure. The DAU/MAU ratio of 65-75% suggests sticky usage, but stickiness to a walled garden is not resilience. In DeFi, we measure protocol risk via metrics: total value locked, liquidation thresholds, oracle freshness. Here, the only metric is “user growth.” That is a confidence trick, not an audit.
Dissecting the code reveals the true owner. Tencent owns the entire stack: the model, the inference, the data, the user base. There is no trustless settlement. When a WorkBuddy agent “pulls data, generates a PPT, and sends it,” the record of that action lives in Tencent’s databases. Arbitrage is just theft with better mathematics — but centralized agents can’t be arbitraged because there is no shared ledger to observe their actions.
Contrarian: What the Bulls Got Right
Don’t dismiss the user experience. Tencent solved adoption. Their “minimal install” — a WeChat mini-program that authorizes PC command execution — is a UX masterpiece. The 10x token usage growth proves agents in a familiar interface drive real engagement. JP Morgan’s bullish case is built on the premise that AI agents inside a super-app will dominate low-complexity tasks: scheduling, data queries, simple content generation. For that use case, centralization is not a bug; it’s an optimization.
Moreover, the cost model works at scale. Tencent’s inference optimization (quantization, distillation) can shrink Goldman’s 17% profit hit to single digits. Their cloud infrastructure and custom chips (Zixiao, Canghai) provide a path to lower costs that no decentralized AI project can match today. The bulls are correct: short-term friction is noise compared to 1.4 billion users.
Takeaway: Accountability Is the Real Missing Byte
Silence in the logs is louder than the error. Tencent’s AI agents execute billions of decisions weekly. If one decision causes a user to lose funds, who bears the liability? The code? The model? Tencent’s legal team? In a blockchain, the answer is written into the protocol. Here, the answer is a PR statement. The crypto industry must learn from this: user adoption without user agency is a trap. We chase scalability and UX, but we forget that the on-chain detective’s job is to prove fault. Tencent’s walled garden will generate profits, but it will never generate truth. The next bull run will reward agents that can be audited, not just used.
