The crypto industry has long been plagued by hacking incidents and exploits, but the situation is now worsening due to the impact of artificial intelligence. Charles Guillemet, the Chief Technology Officer at Ledger, a prominent crypto wallet provider, believes that AI is disrupting the economics of cybersecurity by making it faster and more affordable for attackers to compromise systems. Guillemet stated in an interview that 'identifying and exploiting vulnerabilities has become extremely easy' and that 'the cost is essentially zero.' His comments come at a time when crypto heists are once again making headlines, with the Solana-based Drift protocol being exploited for $285 million in digital assets just this week, and the yield protocol Resolv suffering $25 million in losses the week before.
According to data from DefiLlama, over $1.4 billion in assets were stolen or lost in crypto attacks over the past year. The traditional security approach, which relies on the imbalance between the cost of hacking and the potential reward, is being eroded by AI.
Tasks that previously required skilled researchers months to complete, such as reverse engineering software or chaining exploits, can now be accomplished in seconds with the right prompts. For the crypto industry, where code often controls large pools of funds, this shift significantly raises the stakes. Guillemet warned that 'you need to be perfect' when developing blockchain protocols. The problem is further complicated by AI-generated code, which could lead to the rapid spread of vulnerabilities as more developers rely on AI tools.
Guillemet emphasized that 'there is no magic button to make it secure,' and that the industry will likely produce a significant amount of insecure code by design. To address this issue, Guillemet suggests that crypto protocols need to rethink security from the ground up. He recommends formal verification, which involves using mathematical proofs to validate code, as a more robust approach than traditional audits.
Hardware-based security is another crucial layer, with devices like hardware wallets isolating private keys from internet-connected systems and reducing exposure. Guillemet noted that 'when you have a dedicated device not exposed to the internet, it is more secure by design.' As malware becomes more advanced, this approach is becoming increasingly relevant. Guillemet described attacks that scan compromised phones for wallet seed phrases, allowing hackers to drain funds without user interaction.
For average crypto users, Guillemet's message is clear: assume that systems can and will fail. 'You cannot trust most of the systems you use,' he said. This could lead to more users adopting cold storage, strengthening operational security, and keeping sensitive data offline.
However, even these measures are not foolproof, as risks extend beyond software to include physical attacks targeting crypto holders. Guillemet anticipates a divide in the future, where critical systems like wallets and protocols will invest heavily in security and adapt, while much of the broader software ecosystem may struggle to keep up.
'It's becoming increasingly easy to hack everything,' he said.