The crypto space has long been plagued by hacking incidents and exploits, and now artificial intelligence is exacerbating the problem. According to Charles Guillemet, Chief Technology Officer at Ledger, a prominent crypto wallet provider, the rising use of AI tools is disrupting the economics of cybersecurity, making it easier and less expensive for attackers to exploit vulnerabilities.
In a recent interview with CoinDesk, Guillemet stated that "identifying and exploiting vulnerabilities has become extremely simple" and that "the cost is approaching zero." His comments come amid a string of high-profile crypto heists, including the recent $285 million exploit of Solana-based DeFi protocol Drift and the $25 million attack on yield protocol Resolv. Over the past year, crypto attacks have resulted in the theft or loss of over $1.4 billion in assets, according to data from DefiLlama. The traditional security approach, which relies on the idea that hacking a system should be more difficult and costly than the potential reward, is being eroded by AI.
Tasks that previously required skilled researchers months to complete, such as reverse-engineering software or chaining exploits, can now be accomplished in seconds using the right prompts. For the crypto industry, where code often controls large pools of funds, this shift significantly raises the stakes.
Guillemet warned developers of blockchain protocols that "you need to be perfect" and emphasized the importance of rethinking security from the ground up. He suggested that formal verification, which involves using mathematical proofs to validate code, is a more robust approach than traditional audits, which may miss vulnerabilities.
Hardware-based security is another critical layer, according to Guillemet, who highlighted the benefits of devices like hardware wallets that isolate private keys from internet-connected systems, reducing exposure. As malware becomes increasingly sophisticated, with attacks that can scan compromised phones for wallet seed phrases and drain funds without user interaction, Guillemet's message to average crypto users is clear: assume that systems can and will fail.
"You can't trust most of the systems you use," he said, emphasizing the need for users to take a proactive approach to security, including the use of cold storage, robust operational security, and keeping sensitive data offline. Guillemet expects a divide in the industry, with critical systems like wallets and protocols investing heavily in security and adapting to the new landscape, while much of the broader software ecosystem may struggle to keep up.