Fears of AI-driven DeFi hack epidemic overstated for now — but not for long
A wave of high-profile crypto hacks in April led to fears of an AI-driven hacking epidemic. However, the stream of attacks seemed to ebb, leading some to declare the fears a 'false alarm'. But experts warn that AI is changing attacks, making existing ones cheaper, faster,…
Intelligence analysis by Llama
Fears of an AI-driven hacking epidemic in DeFi may be overstated, but experts warn that AI is changing attacks, making existing ones cheaper, faster, and easier to scale.
Imagine you're trying to find a specific book in a huge library. Before, you would have to look through each book one by one, but now, with the help of AI, you can search through the entire library much faster and find the book you're looking for. This is similar to how AI is helping attackers find vulnerabilities in codebases, making it easier for them to carry out attacks.
Analysis
A Lull Before the Storm?
The recent wave of high-profile crypto hacks in April led to fears of an AI-driven hacking epidemic. However, the stream of attacks seemed to ebb, leading some to declare the fears a 'false alarm'. But experts warn that AI is changing attacks, making existing ones cheaper, faster, and easier to scale.
According to CertiK's H1 report, Web3 protocols lost more than $1.3 billion across 344 security incidents in the first half of 2026. While it's impossible to say how many of those incidents involved AI-identified or assisted exploits, experts believe that AI is helping attackers analyze far larger volumes of code than was previously practical.
"AI systems can help analyze codebases, identify patterns associated with known vulnerabilities, flag suspicious logic, summarize complex code, and prioritize areas for deeper review," says Natalie Newson, senior blockchain investigator at CertiK. "An attacker, or a defender, can examine far more contracts in a given amount of time," she said, meaning that older codebases may now be at risk.
The Real Danger is Scale
Chainalysis also sees AI's biggest impact as being a multiplier for activity, thereby industrializing familiar forms of crypto crime. Sully Hanif, head of UK public sector at Chainalysis, tells Magazine, "Our 2026 crypto crime report found that AI-enabled crypto scams are 4.5x more profitable than traditional scams, extracting $3.2 million per operation versus $719,000." "AI is enabling scammers to reach and manipulate far more victims simultaneously," he says.
The Billion-Dollar Hacks
Looking at the data, the biggest crypto losses of 2026 could have been carried out without the use of AI. CertiK's report found wallet compromise remained the most damaging attack vector during the first half of the year, accounting for more than $444 million in losses across just 33 incidents. Hacken's Q2 2026 Web3 security report found that roughly 88% of all value stolen during the second quarter was due to compromised keys, signers, and operational infrastructure rather than smart contract exploits.
In conclusion, while the fears of an AI-driven hacking epidemic may be overstated for now, experts warn that AI is changing attacks, making existing ones cheaper, faster, and easier to scale. The industry must be prepared for the possibility of increased attacks and take steps to improve security and prevent potential losses.
Key points
- AI is changing attacks, making existing ones cheaper, faster, and easier to scale.
- The industry must be prepared for the possibility of increased attacks and take steps to improve security and prevent potential losses.
- Experts warn that AI is helping attackers analyze far larger volumes of code than was previously practical.
- Chainalysis found that AI-enabled crypto scams are 4.5x more profitable than traditional scams.
- The biggest crypto losses of 2026 could have been carried out without the use of AI.
While the fears of an AI-driven hacking epidemic may be overstated for now, experts warn that AI is changing attacks, making existing ones cheaper, faster, and easier to scale. However, this also means that the industry has the opportunity to improve security and prevent potential losses by taking steps to address the vulnerabilities that AI is highlighting.
The industry must be prepared for the possibility of increased attacks and take steps to improve security and prevent potential losses. If not, the consequences could be severe, with billions of dollars in losses and a significant impact on the overall health of the DeFi ecosystem.
