The cryptocurrency sector has long been plagued by hacking incidents and exploits, but the situation is now worsening due to the growing involvement of artificial intelligence. According to Charles Guillemet, the chief technology officer at Ledger, a leading crypto wallet provider, the economic aspects of cybersecurity are deteriorating as AI tools make it faster and more affordable to launch attacks on systems.
Guillemet noted that identifying and exploiting vulnerabilities has become relatively easy and inexpensive. His comments come at a time when cryptocurrency heists are once again making headlines, with recent incidents including the exploitation of the Solana-based Drift protocol, resulting in the loss of $285 million in digital assets, and an attack on the yield protocol Resolv, which led to $25 million in losses. Over the past year, crypto attacks have resulted in the theft or loss of over $1.4 billion in assets, according to data from DefiLlama.
The traditional security approach, which relied on the idea that hacking a system should be more difficult and expensive than the potential reward, is being eroded by AI. Tasks that previously required skilled researchers months to complete, such as reverse engineering software or chaining exploits, can now be accomplished in seconds using the right prompts. For the cryptocurrency sector, where code often controls large pools of funds, this shift significantly raises the stakes.
Guillemet warned development teams that they need to be perfect in their approach to security. The problem is further complicated by AI-generated code, which can spread vulnerabilities more quickly as more developers rely on AI tools. Guillemet emphasized that there is no simple solution to making a system secure, and that the industry will likely produce a significant amount of insecure code by design. To address this issue, Guillemet suggested that cryptocurrency protocols need to rethink their security approach from the ground up.
He recommended formal verification, which involves using mathematical proofs to validate code, as a more robust method than traditional audits. Additionally, hardware-based security can provide an extra layer of protection, with devices like hardware wallets isolating private keys from internet-connected systems and reducing exposure. Guillemet's message to average cryptocurrency users is straightforward: assume that systems can and will fail.
As a result, users may need to adopt a more cautious approach, including using cold storage, strengthening operational security, and keeping sensitive data offline. However, even these measures may not be enough to mitigate all risks, including physical attacks targeting cryptocurrency holders.
Guillemet expects a divide to emerge in the future, with critical systems like wallets and protocols investing heavily in security and adapting to the new landscape, while much of the broader software ecosystem may struggle to keep up.