Connect with us

Analysis

The Guardrails Are Down: How Meta and Google’s AI Models Fold Under Pressure

Published

on

In the time it takes to read this sentence, a determined attacker can begin dismantling the safety architecture of some of the world’s most widely deployed artificial intelligence models.

Not through exotic exploits or classified techniques. Through conversation.

That is the central finding of Cisco’s State of AI Security 2026 report, published in February: across eight leading open-weight large language models — including flagship systems from Meta and Google — multi-turn jailbreak attacks succeeded at a rate of 92.78%. Not in a laboratory stress-test designed to maximise failure. In conditions that approximate how enterprise software is already being deployed, right now, at scale.

The guardrails are not holding.

A Race the Defenders Are Losing

The broader context matters. Agentic AI systems — which can open pull requests, query internal databases, book services, and trigger automated workflows with limited human oversight — are now being embedded into core business operations. This is no longer theoretical. Organisations have granted these systems authority to modify code and access sensitive data. Yet only 29% of companies reported that they were prepared to secure those deployments — a gap that leaves an enormous attack surface essentially unguarded. Help Net SecurityHelp Net Security

Into that gap, adversarial research has rushed with uncomfortable speed. A late 2025 paper co-authored by researchers from OpenAI, Anthropic, and Google DeepMind found that adaptive attacks — which iteratively refine their approach based on prior failures — bypassed published model defenses with success rates above 90% for most systems tested. The velocity of that translation from academic demonstration to operational exploit is, as Cisco’s Amy Chang put it, the real warning signal. GovInfoSecurity

The attack surface, she told Information Security Media Group, is “quickly outpacing organisations’ defensive maturity.” GovInfoSecurity

1 — The Mechanics of the AI Guardrails Jailbreak

The AI guardrails jailbreak problem is not new. What’s changed is its sophistication and reach.

Cisco’s report, titled Death by a Thousand Prompts, focused specifically on open-weight models — AI systems whose underlying parameters are made publicly available, allowing anyone to download, fine-tune, and deploy them independently. They have surpassed 400 million downloads on Hugging Face, the dominant public repository for such models. Their accessibility drives adoption. It also concentrates risk in ways most enterprise deployments have not accounted for. GovInfoSecurity

The core attack vector Cisco tested was the multi-turn jailbreak: not a single hostile prompt, but a sequence of iterative exchanges designed to gradually erode a model’s resistance. Think of it less like picking a lock and more like a slow negotiation — patient, escalating, ultimately persuasive. Multi-turn attacks were up to ten times more effective than one-shot attempts. Hackread

The results were stark. Across all models tested, attack success rates reached 92.78%, with a sharp rise between single-turn and multi-turn vulnerability that reveals the near-total absence of mechanisms to maintain safety guardrails across longer conversations. The highest single-model rate — 92.78% — was recorded against Mistral’s Large-2. Alibaba’s Qwen3-32B followed at 86.18%. Meta’s Llama 3.3-70B-Instruct showed a multi-turn vulnerability gap of +70 percentage points compared to single-turn testing — a number that tells you the model’s defences were calibrated for simple probes, not sustained pressure. Cisco BlogsCisco Blogs

See also  UOB Q4 2025 Earnings: Bad-Debt Formation Slows as Buffers for Greater China and US Exposure Hold Firm

The contrast with Google’s approach is instructive. Google’s Gemma-3-1B-IT, which prioritises alignment more centrally in its development, demonstrated more consistent resistance across both types of attacks. That’s not vindication — its absolute failure rates remain troubling — but it is an architecture signal. GovInfoSecurity

Meanwhile, a separate line of research published in May 2025 found that an adaptive jailbreak framework achieved success rates of 98.9% against GPT-4o and 99.8% against GPT-4.1. The technique involved layered semantic mutations and dual-end encryption schemes that bypassed both input and output-stage defences. Ninety-nine-point-eight percent.

2 — Why the Safety Architecture Was Built This Way

How easy is it to jailbreak AI models?

Worryingly easy — and structurally, this was partly by design. The difference in vulnerability between Meta’s models and Google’s is not random. Meta’s own documentation acknowledges that developers are “in the driver’s seat to tailor safety for their use case” in post-training — an approach that explicitly places the security burden on whoever deploys the model. Google treated alignment as a central design objective; Meta and Alibaba treated it as a downstream configuration choice. The Cisco research suggests that distinction produces measurably different outcomes under adversarial pressure. GovInfoSecurity

How easy is it to jailbreak AI models? For closed, API-gated models, single-turn attacks fail most of the time. For open-weight models in multi-turn conversations, failure rates of 7–8% are now considered good performance. That reframing alone tells you how far the baseline has shifted.

The open-weight model dynamic compounds this further. Because the weights are publicly accessible, anyone can retrain the model with malicious intent — either weakening its guardrails directly or tricking it into producing content that closed models would reject. Fine-tuning for harm is not a nation-state operation. It requires a consumer GPU and a few hours. Hackread

What’s emerged more recently is an escalation that security teams weren’t fully prepared for: large reasoning models used as autonomous jailbreak agents. Researchers in 2025 evaluated four leading reasoning models — including Gemini 2.5 Flash and DeepSeek-R1 — directing them to conduct multi-turn adversarial conversations against nine widely used target models with no further human supervision. The overall jailbreak success rate across all model combinations reached 97.14%, revealing what the researchers called an “alignment regression” — in which reasoning models can systematically erode the safety guardrails of other models. The implication is genuinely unsettling: the most capable AI systems can now be repurposed as attack infrastructure against other AI systems. nih

See also  Investors Pile Into Hungarian Assets in Bet on Closer EU Ties — and a €17 Billion Prize

3 — What Follows From Here

Are open-weight AI models less safe than closed models?

The evidence suggests yes — but the question carries a policy dimension that closed-model defenders prefer to avoid. Open-weight models with weaker guardrails are not only a security risk. They are increasingly a regulatory risk.

The EU AI Act’s rules for General-Purpose AI models became applicable in August 2025, and by January 2026, the EU AI Office had moved beyond administrative checks to verify the “machine-readability” of AI disclosures. Providers of models with systemic risk designations — those trained with more than 10²⁵ FLOPs of compute — face mandatory safety assessments and incident reporting. Over 30 AI models from companies including Meta, Google, Anthropic, and OpenAI appear to have been trained with at least that threshold. European Commissiontheregister

The regulatory exposure is sharpest for Meta. Two weeks before the EU AI Act’s General-Purpose AI provisions took effect, Meta declined to sign the European Commission’s voluntary safety guidelines, arguing the measures introduced “legal uncertainties” beyond the law’s scope. The position is legally defensible. In the context of Cisco’s vulnerability data, it reads very differently. theregister

State actors have already moved. A China-linked group reportedly automated 80–90% of a cyberattack chain by jailbreaking an AI coding assistant and directing it to scan ports, identify vulnerabilities, and develop exploit scripts. Russian operators integrated language models into malware workflows to generate obfuscated commands. North Korean actors used generative AI to create deepfake job applicants. These are not proofs of concept. They are operational deployments. Help Net Security

For enterprise security teams, the second-order problem is liability. When an agentic AI system operating inside a corporate environment is manipulated through a multi-turn jailbreak into exfiltrating data or executing malicious code, the question of who is responsible — the model developer, the system integrator, the deploying enterprise — will not remain unanswered for long. Litigation and regulatory enforcement will answer it, probably within the next 24 months.

4 — The Open-Weight Case for the Defence

The picture is more complicated than “open models are dangerous; close them.”

The case for open-weight release rests on three serious arguments. First, transparency: an open model can be independently audited, stress-tested, and improved by the research community in ways that closed API systems cannot. Second, concentration risk: if safety-critical AI infrastructure is exclusively controlled by four or five companies, the failure modes of those companies become systemic. Third, and most pragmatically: the security vulnerabilities Cisco identified in open-weight models also exist in closed systems — they’re simply harder to measure, because the weights aren’t visible.

Meta’s LlamaFirewall project — an open-source guardrail framework that combines prompt injection detection, agent alignment checks, and static code analysis — represents a genuine attempt to build a shared safety layer that deployers can adopt. Its PromptGuard 2 component claims state-of-the-art performance on universal jailbreak detection. Whether that performance holds under the kind of multi-turn, reasoning-model-as-attacker pressure Cisco and others have documented is, as yet, untested. Meta

See also  Uncertainty Looms Over Indonesia-US Trade Pact After Legal Blow in Washington

The deeper argument — articulated by researchers at F5 Labs among others — is that several guardrail solutions falter against novel attacks, and even top-ranked models regress under subtle architectural shifts, with emerging jailbreak methods demonstrating the almost limitless ways that adversarial prompts can bypass defences. No single architecture is currently winning. That’s not an argument for abandoning safety research; it’s an argument for treating it as an ongoing adversarial process rather than a compliance checkbox. F5

The open-source community has often solved security problems faster than proprietary teams. CVE disclosure, coordinated patching, and red-team competition have all driven measurable improvements in conventional software security. There is no structural reason the same dynamic cannot operate in AI — only the question of whether it will move fast enough.

The Asymmetry at the Core

What Cisco’s research reveals, stripped of its technical language, is a fundamental asymmetry: the cost of mounting an AI guardrails jailbreak is falling, and the cost of defending against one is rising.

A sustained multi-turn attack requires patience and iteration. It does not require expertise. The G0DM0D3 open-source toolkit, which surfaced in early 2026, claims to jailbreak dozens of models simultaneously through parallel prompt engineering — no special knowledge required, a web interface, a few minutes. Whether or not specific tools like that persist, the underlying dynamic will: capability to attack will continue to outpace capability to defend, as long as safety alignment remains an afterthought in model development rather than a foundational design constraint.

The EU’s AI Act represents the first serious attempt to impose legal accountability on that dynamic — to require, not merely encourage, safety testing commensurate with a model’s potential harm. The regulation’s “ecosystem enforcement” strategy suggests the EU will use the AI Act in tandem with antitrust laws to prevent tech giants from monopolising the AI market — and, by extension, from externalising safety costs onto deployers and users. FinancialContent

Yet regulation, at its best, lags the technology by two to three years. The 92.78% figure exists today. The laws designed to address it do not.

What that gap costs — in data breaches, in manipulated agentic workflows, in AI systems turned against the organisations that deploy them — is a number no one has calculated yet. The bill is coming due regardless.


Discover more from The Economy

Subscribe to get the latest posts sent to your email.

Continue Reading
Click to comment

Leave a Reply

Analysis

Strait of Hormuz 2026: Why Markets Still Don’t Trust It’s Open

Published

on

If you’ve followed headlines about the Strait of Hormuz over the past several months, you’d be forgiven for losing track of whether it’s actually open. That confusion isn’t a media failure — it genuinely has opened, closed, and reopened multiple times since the conflict began, and the pattern itself is the real story markets need to understand, far more than any single day’s price move.

A Timeline That Explains the Market’s Persistent Skepticism

The crisis began February 28, 2026, when US and Israeli military operations against Iran triggered Iranian retaliation, including drone, ballistic missile, and small-boat attacks on vessels attempting to transit the Strait (Brookings). By March 4, Iranian forces formally declared the Strait “closed.” Insurance for transiting vessels became unavailable or prohibitively expensive, and seafarers largely refused the journey — meaning the Strait was effectively shut even without a formal blockade in the technical sense (Brookings).

What followed was a genuinely chaotic sequence that explains why traders remain reluctant to fully price in a resolution even now. On April 9, there was no sign an earlier agreement to lift the blockade was actually being implemented — ships were once again prevented from passing. Abu Dhabi National Oil Company’s CEO confirmed the Strait remained closed despite an announced ceasefire, noting 230 loaded oil tankers were waiting inside the Gulf (Wikipedia — 2026 Strait of Hormuz crisis). On April 17, Iran’s foreign minister announced the Strait was open to all shipping — oil prices dropped 11% immediately following the announcement. The very next day, April 18, Iran closed it again, citing the US refusal to lift its own naval blockade in response.

Even the June 17 memorandum of understanding between Trump and Iranian President Masoud Pezeshkian to formally end the war and the blockades didn’t hold cleanly: on June 20, Iran said it had closed the Strait again, citing continued Israeli strikes in southern Lebanon as a violation of the broader ceasefire agreement — a claim the US military denied (Wikipedia). By June 27, the US Navy’s Joint Maritime Information Center announced a widened shipping route through the Strait near Oman, an action explicitly framed as challenging Iran’s control over the waterway rather than a clean bilateral resolution.

See also  Uncertainty Looms Over Indonesia-US Trade Pact After Legal Blow in Washington

Why This Chokepoint Matters More Than Any Other Piece of Global Infrastructure

Approximately 20 million barrels of oil per day move through the Strait of Hormuz — roughly 20% of global seaborne oil trade and about 27% of the world’s maritime crude oil and petroleum product trade combined (Congressional Research Service). At its narrowest point, the Strait is just 33-34 kilometers wide, split into two unidirectional two-mile-wide shipping lanes separated by a two-mile buffer zone sitting entirely within Iranian and Omani territorial waters (Congressional Research Service).

Critically, no rerouting option exists that can replace this volume at comparable cost. An extended full closure would remove 17-21 million barrels from daily global supply against total world consumption of roughly 100 million barrels per day — a supply shock with no readily available substitute (Ziro Market).

The Damage Already Done, Even With Partial Reopening

The International Energy Agency characterized the disruption as the largest supply disruption in the history of the global oil market (Wikipedia — Economic impact of the 2026 Iran war). At peak conflict intensity in February-March 2026, Brent crude surged well above $120 per barrel. As ceasefire talks progressed through May and June, prices retreated significantly — falling to around $95-100 per barrel by early June, and briefly dipping to $78.24 per barrel by mid-June, the lowest level since March 3, before the framework agreement was formally signed (Al Jazeera).

But the ripple effects extend well beyond crude oil pricing. The Strait closure disrupted roughly 45% of global sulfur supply — critical for fertilizer production, copper industry metal leaching, and sulfuric acid manufacturing — and constrained helium supply, a commodity essential to semiconductor manufacturing (Wikipedia — Economic impact). Shipping companies including Maersk, CMA CGM, and Hapag-Lloyd suspended transits through the Strait and related routes like the Red Sea entirely, forcing rerouting around the Cape of Good Hope that added two to three weeks to journey times and increased per-shipment costs by 30-50% (Ziro Market).

Europe’s Quieter But Deeper Crisis

While oil price headlines dominated coverage, Europe faced an arguably more severe parallel crisis through the suspension of Qatari liquefied natural gas exports combined with the Strait closure — hitting at the worst possible moment, with European gas storage sitting at just 30% capacity following a harsh 2025-2026 winter. Dutch TTF gas benchmarks nearly doubled to over €60/MWh by mid-March (Wikipedia — Economic impact).

See also  How to Fix the Pakistan Unemployment Crisis: A Structural Guide

The European Central Bank responded by postponing planned interest rate reductions on March 19, simultaneously raising its 2026 inflation forecast and cutting GDP growth projections, with UK inflation specifically projected to breach 5% during 2026. Chemical and steel manufacturers across the UK and EU imposed surcharges of up to 30% to offset surging electricity costs, and the ECB explicitly warned that a prolonged conflict risked pushing major energy-dependent economies, including Germany and Italy, into technical recession by year-end.

Why OPEC+ Couldn’t Simply Fill the Gap

A natural question is why Saudi Arabia and the UAE — the two largest Gulf Cooperation Council producers with meaningful spare capacity — didn’t simply increase output to compensate. The answer is logistical rather than a lack of willingness: the Strait closure itself limited their ability to actually export any increased production volumes, even when pumping more oil, because the export bottleneck was the same chokepoint causing the broader crisis (Ziro Market). Total OPEC country production fell more than 30% since the start of the war, and the region’s spare capacity — the traditional shock absorber for global oil markets — proved largely irrelevant when the actual export route itself was under attack (Brookings).

US shale producers, meanwhile, responded more slowly to the price signal than historical patterns would predict. Rig counts stayed largely steady through April 2026, though well-completion activity in the Permian Basin did rise roughly 20% over several weeks as previously drilled wells came into production — still below pre-pandemic activity levels overall (Brookings).

The Market Is Still Pricing a Discount for Uncertainty, and Analysts Say That’s Correct

Vandana Hari, founder of Singapore-based Vanda Insights, offered perhaps the most useful framing for understanding current market behavior: crude’s slide following the memorandum of understanding is “entirely sentiment-driven,” with markets front-running the prospective reopening and likely pricing in a best-case scenario for normalized flows — meaning potential hiccups, from logistics to renewed geopolitical tensions, aren’t being adequately factored in (Al Jazeera).

See also  China Plays the Long Game: What Beijing's Measured Response to Trump's New Tariffs Means for US-China Trade Talks 2026

Given the actual track record — multiple announced reopenings followed by renewed closures throughout April and June — that skepticism looks well-founded rather than excessive.

What This Means for Businesses and Investors Going Forward

For companies with Gulf-dependent supply chains: Treat any single reopening announcement as provisional rather than a genuine all-clear, given the pattern of reversals throughout the spring. Maintaining rerouting contingency plans and insurance flexibility remains prudent even after formal ceasefire signings.

For inflation-sensitive investors and central bank watchers: The relationship Ziro Market’s analysis highlights is worth internalizing directly: whether oil settles near $80-85 (supporting rate cuts, lower CPI, stronger oil-importing currencies) or spikes back toward $120 (elevated inflation, delayed rate cuts) functions as a genuine macro regime switch — not a marginal input, but potentially the single largest swing factor for 2026 global monetary policy.

For commodity-exposed sectors beyond energy: The sulfur, fertilizer, and helium supply disruptions are underappreciated second-order effects that specifically hit agriculture and semiconductor manufacturing — sectors not typically associated with Middle East conflict risk but directly exposed through this specific chokepoint.

The Bottom Line

The Strait of Hormuz crisis of 2026 has been less a single supply shock than a recurring pattern of partial resolutions and renewed disruptions, and that pattern itself is the most important thing for markets and businesses to understand going forward. Prices have retreated substantially from their conflict-peak highs, and the June 17 memorandum of understanding represents genuine diplomatic progress. But given that the Strait has been declared “open” and then closed again multiple times within the same several-week windows, treating the current relative calm as a durable resolution — rather than the latest phase in an ongoing negotiation — would be a mistake that both markets and policymakers seem determined not to repeat.


Discover more from The Economy

Subscribe to get the latest posts sent to your email.

Continue Reading

AI

AI Capex Bubble 2026: The Hidden $662B Debt Nobody Reports

Published

on

Every earnings season now brings a fresh wave of headlines about hyperscaler AI capital expenditure hitting a new record. The “big four” — Amazon, Microsoft, Alphabet, and Meta — are on track to spend roughly $725 billion combined in 2026, a 77% jump from the $410 billion deployed in 2025 (UnboxFuture). That number gets reported constantly. What almost nobody is reporting with the same prominence is a separate figure that may matter more: roughly $662 billion in data center lease commitments that hyperscalers have already signed but not yet begun — obligations that currently sit entirely off balance sheet.

Why the Off-Balance-Sheet Number Changes the Whole Picture

Under GAAP accounting rules governing when a lease “commences,” these signed-but-not-started commitments don’t appear in the capital expenditure figures analysts and investors typically scrutinize when assessing hyperscaler financial health. According to reporting citing Moody’s early-2026 analysis, this shadow liability is larger than the combined on-balance-sheet debt of the same companies (Anomaly Investments).

That detail matters enormously for one specific argument AI infrastructure bulls have relied on: the claim that this buildout is being conservatively self-funded from operating cash flow rather than risky leverage. Once the full picture of committed-but-unrecognized obligations is accounted for, that defense becomes much harder to sustain.

The Debt Is Already Showing Up, Not Just Theoretical

This isn’t a purely hypothetical concern about future liabilities. Big tech companies have already issued more than $100 billion of bonds in 2026 specifically to help fund AI capital expenditure, and investors have responded by demanding record levels of protection against potential defaults through credit default swaps — essentially insurance policies against bond default (IEEE ComSoc).

Individual company examples illustrate the shift toward leverage: Oracle issued an $18 billion bond specifically tied to its data center expansion; CoreWeave secured a $2.6 billion loan alongside a $1.75 billion bond package; and OpenAI and Oracle reportedly entered into a $100 billion vendor financing arrangement (Anomaly Investments). At Amazon specifically, capital expenditure over the trailing twelve months has reached $151 billion — a figure that now exceeds the company’s entire operating cash flow, pushing free cash flow into negative territory.

The Depreciation Assumption Almost No Coverage Questions

Here’s an angle genuinely underexplored across most financial media: the depreciation schedules hyperscalers use for AI hardware assume a five-to-six-year useful life. But given how rapidly GPU generations are turning over and how intensively AI workloads are pushing hardware utilization, critics argue the real economic life of this equipment is closer to two to three years. That gap between assumed and actual depreciation is estimated to understate true asset depletion by roughly $176 billion between 2026 and 2028 alone — a figure that grows as accelerating token consumption pushes hardware utilization beyond the assumptions built into current depreciation schedules (Anomaly Investments).

See also  China Tungsten Export Curbs: Is Japan’s AI Chip Supply at Risk?

Layered on top of that is the energy cost curve: running the current roughly 30-gigawatt installed base of AI infrastructure costs approximately $27 billion annually today, but that figure is projected to climb to between $45 and $90 billion per year as capacity scales toward 2029 — and crucially, these are first charges against revenue, not optional or deferrable costs.

The Revenue Gap: Who’s Actually Paying for All This?

The most commonly cited justification for the capex surge is that the pure-play AI vendors — OpenAI, Anthropic, and others — represent a massive and rapidly growing revenue opportunity. The reality is more nuanced. OpenAI’s roughly $20 billion annualized revenue run rate, while genuinely impressive for a company with barely any consumer products three years ago, represents only about 3% of projected 2026 hyperscaler capex. Anthropic’s roughly $9 billion run rate, despite showing 9x year-over-year growth, occupies a similarly small share. The entire cohort of pure-play AI vendors combined — including Cohere, Mistral, Perplexity, and others — likely accounts for less than $35 billion in projected combined 2026 revenue against a hyperscaler capex figure exceeding $700 billion (Futurum Group).

That gap is the crux of the bubble debate: hyperscalers are betting the infrastructure will ultimately serve enterprise adoption and their own AI services broadly, not just third-party AI vendor revenue — but that bet requires enterprise AI monetization to arrive at a scale that, as of mid-2026, remains largely unproven outside of code generation and basic customer service automation.

The Skeptic’s Case, From Inside Goldman Sachs Itself

The most prominent voice of institutional skepticism doesn’t come from an outside critic — it comes from within Goldman Sachs itself. Jim Covello, the bank’s Head of Global Equity Research, has consistently argued the economics of the generative AI transition are fundamentally flawed, stating in mid-2026 that the industry has moved “further away” from justifying the scale of capital expenditure compared to two years prior (UnboxFuture). Covello has specifically flagged circular capital flows between cloud providers and AI startups — where hyperscalers invest in AI companies that then spend that same capital purchasing compute from those same hyperscalers — as a red flag reminiscent of vendor financing patterns seen in the dot-com era.

See also  China's 50% Domestic Equipment Rule: The Semiconductor Mandate Reshaping Global Tech

The valuation comparison to that era is explicit and increasingly common among strategists: US technology and AI equities carry EV/EBITDA multiples near 25x, close to historical extremes and above the telecom valuations that preceded the 2000 dot-com peak. More specifically, capex is currently expanding roughly 46 percentage points faster than revenue growth — a gap that exceeds the 32-point divergence observed during the 2001 telecom excess cycle (Allianz Research). Separately, Bank of America strategists have pointed out that AI stock concentration has reached levels matching prior bubble peaks, with the “AI Big 10” (Nvidia, Microsoft, Alphabet, Amazon, Meta, Apple, Tesla, Broadcom, Micron, and AMD) now making up 41% of the S&P 500 — comparable to the concentration of tech and telecom stocks during the actual dot-com bubble (Yahoo Finance).

The Bull Case Isn’t Naive Either

It would be inaccurate to frame this purely as informed skeptics versus blind enthusiasm. Goldman Sachs’ own broader research (distinct from Covello’s individual view) models roughly $7.6 trillion in cumulative AI capital expenditure between 2026 and 2031, built on the expectation that token consumption will increase 24-fold by 2030, driven largely by enterprise AI agents becoming embedded in production workflows rather than remaining experimental (Sesame Disk / Goldman commentary). Microsoft has disclosed an $80 billion backlog of Azure orders it currently cannot fulfill due to power constraints — genuine evidence that demand, at least for existing capacity, is outpacing even the current aggressive build-out pace (Futurum Group).

Leverage levels also remain more conservative than headlines suggest in absolute terms: the top five US capex providers reported a combined $385 billion in debt at the end of 2025, with leverage ratios still roughly 20% below the “high spender” cohort from the 2000 dot-com peak, according to Allianz Research analysis — meaning rising debt levels are a trend worth monitoring closely, not yet an acute crisis.

What Happens If the Bubble Skeptics Are Right

Historical infrastructure cycles offer a specific and somewhat counterintuitive lesson: the investors who fund the initial frenzied build-out phase rarely capture the long-term rewards. If the AI capex cycle follows the pattern of the 1998-2001 fiber optic buildout, hyperscalers may eventually be forced to write down the value of data centers and GPUs purchased at today’s prices and utilization assumptions. But that collapse in computing costs, paradoxically, could pave the way for a new generation of leaner, genuinely profitable software companies to build on top of the resulting cheap, overbuilt infrastructure — much as fiber-optic overbuild eventually enabled the 2000s streaming and cloud computing boom, even after the original telecom investors were wiped out.

See also  Revenge of the AI Bubble Burst: Why the Math Stopped Working

What This Means for Investors and Businesses

For equity investors, the practical signal to watch isn’t the headline capex number — it’s the widening gap between capex growth and revenue growth, and whether that gap begins narrowing through 2027 as enterprise adoption either accelerates or disappoints. For businesses evaluating AI vendor relationships, the circular-financing pattern flagged by Covello is worth diligence: understanding whether an AI vendor’s revenue depends partly on capital originally supplied by the same hyperscaler providing its compute is a legitimate red flag for assessing that vendor’s underlying financial independence. For fixed-income investors, the rising credit default swap pricing on hyperscaler-linked debt is itself a market signal worth tracking as an early indicator of shifting sentiment, independent of equity price action.

The Bottom Line

The AI infrastructure buildout genuinely is the largest corporate capital expenditure cycle in recorded history, and it’s happening for real, defensible reasons tied to a genuine technology shift. But the debate over whether it constitutes a bubble isn’t really about whether AI technology is useful — it’s about whether the timing of returns can keep pace with public equity markets’ patience, and whether the $662 billion in off-balance-sheet lease commitments, aggressive depreciation assumptions, and circular vendor financing arrangements represent manageable financial engineering or the early architecture of a genuinely serious correction. Both cases have real evidence behind them. What’s clear is that the headline capex figure everyone quotes is no longer the most important number in this story.


Discover more from The Economy

Subscribe to get the latest posts sent to your email.

Continue Reading

Markets & Finance

Gold Overtakes US Treasuries in Reserves: What It Means

Published

on

Most gold coverage in 2026 has fixated on the price chart — the spectacular run from roughly $2,633 an ounce at the start of the year to fresh record highs above $5,400 by mid-year (Intellectia). That’s a legitimate story. But it’s not the most important one. The more consequential shift is structural, not seasonal: gold has overtaken US Treasuries as the largest share of global central bank reserves for the first time in three decades (BlackRock).

That’s not a headline about a commodity rally. It’s a headline about the architecture of the global monetary system quietly shifting under everyone’s feet.

The Trigger Most Coverage Undersells

The pivotal moment behind this shift traces back to 2022, when roughly $300 billion of Russian central bank foreign exchange reserves were frozen as part of international sanctions following the invasion of Ukraine (ISA Bullion). For reserve managers around the world — not just in Russia — that event functioned as a wake-up call: dollar-denominated assets held abroad are not unconditionally safe from geopolitical sanctions risk. Gold, by contrast, carries no counterparty risk; nobody can freeze a gold bar sitting in a country’s own vault.

That single realization has reshaped reserve management strategy globally. Central bank gold purchases averaged 225 tonnes per quarter between 2021 and 2025 — roughly double the pace seen from 2016 to 2020 (J.P. Morgan Global Research). BRICS+ nations now hold 17.4% of global gold reserves, up sharply from just 11.2% in 2019 (ISA Bullion).

Who’s Actually Buying, and Why the List Matters

Poland has been the standout accumulator, adding 20.2 tonnes in February 2026 alone, another 11.2 tonnes in March, and 14 tonnes in April — extending a rapid buildup that has added more than 360 tonnes to its reserves since 2023 (BestBrokers). China’s central bank maintained consecutive monthly gold purchases for 19 straight months through May 2026, even though much of this buying goes officially unreported to the IMF — analysts widely believe the People’s Bank of China continues accumulating gold “off the books” (ISA Bullion).

See also  US Sovereign Debt Risk 2026: CBO Projects $50 Trillion, Fitch Warns

China’s motivation appears explicitly strategic rather than opportunistic. Chinese net gold imports jumped to 317 tonnes in the first quarter of 2026 alone — nearly triple the prior quarter — while the People’s Bank of China’s own reported purchases accelerated from roughly one tonne per month through February to eight tonnes in April (J.P. Morgan Global Research). J.P. Morgan’s own analysts frame this as part of a long-term Chinese project to build gold reserves as a foundation for establishing the renminbi as a credible alternative reserve currency.

A World Gold Council survey found a striking 95% of central banks expect to increase their gold holdings in 2026, up from 81% in 2024 and just 52% in 2021 — a trajectory showing accelerating, not plateauing, institutional conviction (BlackRock).

The Part of the Story Most Coverage Misses: Not Everyone Is Buying

Here’s an angle that gets consistently underplayed: this isn’t a uniform global stampede into gold. Several countries, including Singapore, Jordan, Mexico, and the Solomon Islands, actually reduced their gold reserves in 2025 — Singapore in particular emerged as a notable seller, likely driven by portfolio rebalancing decisions and a desire to realize gains after gold’s historic surge, rather than any lack of confidence in the metal (BestBrokers). Germany, for its part, has reduced its gold holdings every year since at least 2002, though its 2024 sale of just 1.1 tonnes was the smallest annual reduction on record.

This nuance matters for anyone trying to build a genuinely accurate picture: the de-dollarization and gold-accumulation trend is heavily concentrated among specific emerging-market and non-aligned economies — not a universal central bank consensus. Understanding which countries are buying and why is more analytically useful than simply citing an aggregate global purchasing figure.

See also  10 Ways Academia and Research Are Driving China's Economic Growth

Where Forecasts Diverge — And Why the Spread Is So Wide

Institutional price forecasts for gold currently show a genuinely unusual spread. J.P. Morgan projects gold reaching $6,000 an ounce by the end of 2026, and potentially $6,300 by the end of 2027 (J.P. Morgan Global Research). Morgan Stanley’s more conservative 2026 forecast sits at $4,400 an ounce (Morgan Stanley), while State Street projects a range of $4,750 to $5,500, and DWS targets $5,400 by mid-2027 (Discovery Alert).

A spread exceeding $1,500 per ounce between the most bullish and most conservative institutional forecasts reflects a genuine, unresolved analytical disagreement — not just differing house styles. The bull case rests on the idea that central bank reserve diversification represents a structural, policy-level shift rather than opportunistic market timing, making it fundamentally different from prior gold cycles driven mainly by retail or momentum investors. The more cautious case notes that gold’s roughly 245% rally from September 2022 to January 2026 is the largest percentage advance in modern gold market history — and historically, rallies of that magnitude have eventually triggered significant, multi-year corrections (Discovery Alert).

The Under-Discussed New Buyer: Stablecoin Issuers

One of the least-covered developments in this entire gold story is the emergence of stablecoin issuers as a genuinely new category of gold demand. As crypto markets have matured, some stablecoin issuers have begun holding gold as part of their reserve backing strategy — a development BlackRock specifically flags as part of the “early stages” of a new demand wave that also includes central banks and the broader AI infrastructure buildout’s effect on institutional portfolio hedging behavior (BlackRock).

What This Means for Different Audiences

For everyday investors: Gold ETPs still make up only about 0.17% of total US private financial assets, remaining well below prior peaks seen in the early 2010s, while private wealth gold allocations globally sit roughly 50% below levels seen a decade ago (BlackRock). That suggests meaningful room for incremental Western retail and institutional demand to grow, even after the current rally, if the structural de-dollarization narrative continues to gain mainstream acceptance.

See also  Investors Pile Into Hungarian Assets in Bet on Closer EU Ties — and a €17 Billion Prize

For businesses managing currency exposure: The scale and persistence of central bank gold buying is one of several signals (alongside Fed communication policy changes and fiscal deficit concerns) suggesting continued structural pressure on the US dollar’s long-term reserve currency dominance — a trend worth factoring into multi-year currency hedging strategies rather than treating as a short-term news cycle.

For portfolio allocators: The unusually wide spread between institutional forecasts is itself useful information — it suggests treating any single gold price target as a scenario input rather than a confident base case, and sizing gold allocations based on its role as a portfolio diversifier and inflation/geopolitical hedge rather than as a directional price bet.

The Bottom Line

The gold price chart is the story most people are watching. The reserve-composition shift is the story that actually matters for the long-term structure of global finance. Gold surpassing US Treasuries as the largest share of central bank reserves for the first time since 1996 is a genuinely historic threshold — one triggered specifically by the 2022 Russian asset freeze and now sustained by a broad, if uneven, cohort of emerging-market central banks pursuing deliberate de-dollarization strategies. Whether the price keeps climbing toward J.P. Morgan’s $6,000 target or cools toward Morgan Stanley’s more conservative range matters less, in the long run, than the structural fact that the world’s reserve managers have permanently changed how they think about gold’s role in the global financial system.


Discover more from The Economy

Subscribe to get the latest posts sent to your email.

Continue Reading
Advertisement
Advertisement

Trending

Copyright © 2026 The Economy, Inc . All rights reserved .

Discover more from The Economy

Subscribe now to keep reading and get access to the full archive.

Continue reading