The crypto industry has long been plagued by hacking incidents and exploits, but the situation is now worsening due to the impact of artificial intelligence. Charles Guillemet, Chief Technology Officer at Ledger, a leading crypto wallet provider, warns that the economic balance of cybersecurity is being disrupted as AI tools make it faster and cheaper to launch attacks on systems. Guillemet notes that identifying and exploiting vulnerabilities has become significantly easier and less costly.
He emphasizes that the traditional security approach, which relies on the idea that hacking should be more difficult and expensive than the potential reward, is no longer effective due to AI. Recent high-profile crypto heists, including the $285 million exploit of the Solana-based Drift protocol and the $25 million attack on the yield protocol Resolv, highlight the severity of the issue. According to DefiLlama, over $1.4 billion in assets were stolen or lost in crypto attacks over the past year.
The growing use of AI-generated code is also a concern, as it can spread vulnerabilities more quickly. Guillemet advises developers of blockchain protocols to strive for perfection, as the stakes are high in the crypto space where code often controls large funds.
To address these security challenges, Guillemet recommends a fundamental rethink of security approaches. He suggests that formal verification, which involves using mathematical proofs to validate code, is a more robust method than traditional audits. Additionally, hardware-based security, such as using devices like hardware wallets that isolate private keys from internet-connected systems, can provide an extra layer of protection. For average crypto users, Guillemet's advice is to assume that systems can and will fail.
He recommends adopting a more cautious approach, such as using cold storage, strengthening operational security, and keeping sensitive data offline. However, even these measures are not foolproof, as risks extend beyond software to include physical attacks targeting crypto holders. Guillemet anticipates a divide in the industry, with critical systems like wallets and protocols investing heavily in security and adapting to the new landscape, while much of the broader software ecosystem may struggle to keep up.