[GRADE A1/A2 — EFTA00897525, EFTA00813126, EFTA00814461 (DOJ release + rhowardstone corpus)]
The Carbyne investigation led to a second Barak-Epstein surveillance venture: Toka, a cyber firm founded in 2018 by Barak and Yaron Rosen (former IDF cyber chief). Toka's capabilities include hacking security cameras, altering live and recorded footage, and leaving no digital traces on compromised devices. The company works exclusively with state clients — governments, intelligence bodies, and law enforcement agencies. Its activities are overseen by the Israeli Defense Ministry. 13 documents in the corpus reference Toka.
February 1, 2018 (EFTA00897525): Barak sends Epstein "Toka investor pitch lite.pdf" with the message:
"An initiative of three of IL's leading players in Cyber (both directions). They're courting me to join. Want to discuss it with you."
The phrase "both directions" is notable — in Israeli cybersecurity, this typically means both offensive (attack/surveillance) and defensive (protection) capabilities. Barak sought Epstein's counsel before joining Toka.
May 7, 2018 (EFTA00813126): Barak sends Epstein "Toka Strategic Overview for Customers PDF.pdf" — a document designed for government clients. Barak writes:
"Stimulating meeting today. Need another short one probably on Thursday night. On Toka, please find the attached material. You can use it vis a vis senior officials or Heads. It is built for Governments as clients. If you think of approaching Cousins consult with me in advance."
This is potentially the most significant single sentence in the Carbyne/Toka corpus:
"You can use it vis a vis senior officials or Heads" — Barak authorizes Epstein to pitch Toka's government hacking technology to heads of state and senior officials. This positions Epstein as an authorized sales intermediary for government surveillance tools.
"Cousins" — In intelligence tradecraft, "cousins" is a widely documented term for partner intelligence agencies. The CIA refers to MI6 as "the cousins." Israeli intelligence uses similar terminology for allied services. If this is the intelligence meaning, Barak is telling Epstein to check with him before approaching intelligence agencies about Toka — implying that Epstein had access to intelligence contacts and that such approaches required coordination.
"consult with me in advance" — This is an operational instruction. Barak is not merely sharing a pitch deck — he is managing Epstein's access to specific parties and requiring pre-clearance.
May 8, 2018 (EFTA00814461): The next day, Barak asks Epstein to forward the Toka presentation to "Mona" via "Terje" (consistent with Terje Roed-Larsen, Norwegian diplomat and Epstein associate) to find "the right address for Toka discussion in Norway." This confirms Epstein was actively distributing Toka's government sales materials through his diplomatic network.
Reporting by Haaretz (December 2022) and other outlets established Toka's technical capabilities:
These capabilities exceed those of NSO Group's Pegasus spyware (which targets phones). Toka can alter evidence — a capability with implications for both intelligence operations and legal proceedings.
WHAT THIS SHOWS AND DOES NOT SHOW: The documents establish that Barak brought Toka to Epstein as a second surveillance investment, authorized Epstein to pitch its government hacking technology to heads of state, and instructed Epstein to consult before "approaching Cousins." Epstein distributed Toka materials through his diplomatic network (Roed-Larsen). The "Cousins" reference may indicate intelligence agency contacts, but it could also refer to business associates, foreign government officials, or have an idiomatic meaning in Barak's English usage that differs from the intelligence tradecraft definition. This does NOT establish that Epstein sold government hacking tools to intelligence agencies or that any intelligence operation resulted from these communications.