A wave of excessive profile crypto hacks in April that many suspected had been orchestrated utilizing refined AI instruments to establish sensible contract exploits, led to fears that each DeFi protocol was out of the blue in danger.
In Might, Manuel Aráoz, founding father of the blockchain safety platform OpenZeppelin, declared “all of DeFi unsafe” following $630 million in crypto losses from exploits in April.
However even because the trade braced for the situation of DeFi protocols falling like dominoes to agentic AI, the stream of assaults appeared to ebb.
That led Dragonfly managing companion Haseeb Qureshi to declare not too long ago that fears of a DeFi “hackpocalypse” had been a “false alarm.” He identified that even together with April’s large hacks, the 12 months thus far has seen “a decrease fee of hacked $ per 30 days” and that the “median hack dimension by 12 months can be declining.”
So who’s proper? Are the fears of an AI pushed hacking epidemic completely overblown, or is that this simply the lull earlier than the storm?
“I feel the ‘hackpocalypse’ narrative is overstated if it suggests AI has already changed compromised keys, weak infrastructure and human error as the primary causes of Web3 losses,” Stephen Ajayi, Hacken’s main offensive safety engineer, tells Journal.
However he provides that doesn’t imply the fears are fully misplaced.
“I’d not confuse ‘not dominant but’ with ‘not coming.’ My view is that we’re nonetheless within the early levels: the hype is forward of the incident information, however the functionality curve is catching up shortly,” Ajayi clarifies.
AI is altering assaults, even when it isn’t inflicting them
Web3 protocols misplaced greater than $1.3 billion throughout 344 safety incidents within the first half of 2026, in response to CertiK’s H1 report.
It’s unattainable to say what number of of these incidents concerned AI-identified or assisted exploits. Natalie Newson, senior blockchain investigator at CertiK, explains that “proving whether or not AI was used to search out an exploit may be troublesome.”
Associated: AI-driven hacks might kill DeFi — except initiatives act now
Reasonably than on the lookout for direct attribution, Newson says she watches for circumstantial proof like modifications in attacker habits. She notes there’s been a big enhance in older sensible contracts and unverified contracts being exploited.
CertiK’s report discovered that 73 code vulnerability incidents within the first half of 2026 had been deployed for not less than a 12 months earlier than being exploited. “In 2025 as a complete this quantity was 45,” Newson says. This implies AI helps attackers analyze far bigger volumes of code than was beforehand sensible.
As an alternative of inventing fully new assault courses, AI seems to be making present ones cheaper, sooner and simpler to scale.
Month-to-month change in crypto exploit quantities and variety of incidents throughout H1. Supply: CertiK
“AI techniques might help analyze codebases, establish patterns related to recognized vulnerabilities, flag suspicious logic, summarize complicated code, and prioritize areas for deeper evaluation,” Newson says.
“An attacker, or a defender, can look at way more contracts in a given period of time,” she stated, that means that older codebases might now be in danger.
The true hazard is scale
Blockchain information platform Chainalysis additionally sees AI’s largest affect as being a multiplier for exercise, thereby industrializing acquainted types of crypto crime.
Sully Hanif, head of UK public sector at Chainalysis, tells Journal, “Our 2026 crypto crime report discovered that AI-enabled crypto scams are 4.5x extra worthwhile than conventional scams, extracting $3.2 million per operation versus $719,000.”
“AI is enabling scammers to achieve and manipulate way more victims concurrently.”
The hazard doesn’t simply come from sensible contract exploits. Chainalysis discovered that impersonation scams elevated greater than 1,400% 12 months over 12 months in 2025, with criminals utilizing AI-generated deepfakes and face-swapping software program available on Telegram marketplaces.
“We’ve seen AI supercharge present playbooks,” he says. “The fraud-as-a-service ecosystem now gives modular, turnkey companies and AI makes every module simpler.”
Associated: AI fashions led to a ‘vulnerability apocalypse’ in crypto safety: Immunefi CEO
Chainalysis not too long ago recognized $36.7 million stolen from protocols whose sensible contract supply code had by no means been publicly verified. Hanif warns that attackers are utilizing massive language fashions to reverse engineer uncooked bytecode and establish vulnerabilities at scale.
The info: $36.7 million from unverified contracts. Supply: Chainalysis
“AI is prone to have its best affect the place human effort has historically been the bottleneck,” Newson says. “We’re observing AI getting used to impersonate assist workers, video calls, influencers […] The largest danger is that attackers not want technical experience or robust language abilities.”
So the place are the billion-dollar hacks coming from?
Wanting on the information, the largest crypto losses of 2026 might have been carried out with out the usage of AI.
CertiK’s report discovered pockets compromise remained essentially the most damaging assault vector in the course of the first half of the 12 months, accounting for greater than $444 million in losses throughout simply 33 incidents.
Hacken’s Q2 2026 Web3 safety report discovered that roughly 88% of all worth stolen in the course of the second quarter was resulting from compromised keys, signers and operational infrastructure quite than sensible contract bugs, largely pushed by the 2 North Korean-linked assaults towards Drift Protocol and KelpDAO.
Of the $763,971,791 stolen, 88.3% was traced to compromised keys, signers, and infrastructure. Supply: Hacken
Ajayi s that quite than changing conventional assault strategies, AI is amplifying them by figuring out susceptible staff, producing convincing phishing campaigns, analyzing public code and accelerating exploit growth. Nevertheless, compromised governance, poor operational safety and weak infrastructure nonetheless decide whether or not assaults succeed.
“AI is a brand new amplifier, however the previous safety failures nonetheless decide how massive the blast turns into,” he stated.
AI modifications the battlefield, however not the basics
In fact, AI will also be used as a pressure for good, and the safety trade is deploying it defensively as effectively. Hanif stated investigators are transferring from reactive to preventative, and “the instruments exist now to cease scams earlier than victims lose cash.”
“Finally, AI is prone to improve the capabilities of each attackers and defenders,” Newson stated, “with the steadiness of benefit relying on which facet is ready to combine and operationalize the know-how most successfully.”
Journal: Technique turned an emblem of the dot-com crash: May historical past repeat?
Cointelegraph publishes long-form journalism, evaluation and narrative reporting produced by Cointelegraph’s in-house editorial crew with subject-matter experience. All articles are edited and reviewed by Cointelegraph editors according to our editorial requirements. Content material printed in right here doesn’t represent monetary, authorized or funding recommendation. Readers ought to conduct their very own analysis and seek the advice of certified professionals the place applicable. Cointelegraph maintains full editorial independence.
