The week's two most unrelated-seeming stories, a European politician hacked by Pegasus while investigating spyware abuses and London's Classics Week pulling in $101.6 million in Old Masters sales, turn out to share an obsession: the chain of custody. Who owned what, when, and how that ownership was verified.

Provenance as Vulnerability

The Pegasus case is, structurally, a provenance story. NSO Group's spyware left traces on a phone. Forensic investigators from Access Now reconstructed the timeline of intrusion. The politician's digital history became evidence, a chain of custody for surveillance itself. Meanwhile in London's auction rooms, buyers chasing Old Masters were equally obsessed with paper trails, authenticating ownership back through centuries. Artnet's Margaret Carrigan noted that buyers were chasing 'aesthetics as much as provenance,' which is the art market's version of a security vulnerability: when affect overrides verification, bad actors get through. The parallel is not decorative. Both markets, state surveillance tech and fine art, are premised on the idea that traceability equals legitimacy. Both are regularly gamed by the people who designed the traceability systems.

New Money, Old Hacks

The 'new money in Old Masters' trend and the Pegasus-for-hire industry share a client profile: sovereign wealth, opaque governance structures, buyers who want assets that are hard to trace and hard to seize. A 2022 paper in Global Crime by Brooke Harrington found that art has functioned as a preferred vehicle for financial opacity precisely because provenance documentation is easy to fabricate and hard to prosecute. NSO Group's customer list, revealed through years of forensic investigation by groups like Access Now, reads like a who's-who of authoritarian governments with art-market footprints. The Bloomberg report on DOJ insider trading cases fizzling out completes the triangle: elite financial opacity, whether in spyware, art, or securities, tends to survive prosecution. Provenance is a story you tell, and some people are better resourced to tell it than others.