The Impact of Anthropic's Mythos Model on Crypto Industry Security

The introduction of Anthropic's Mythos AI model has sparked a significant shift in the crypto industry's approach to security. For years, the focus has been on defending smart contracts through auditing and vulnerability cataloging. However, Mythos, designed to identify and exploit system weaknesses, is pushing the industry to look beyond code and into the underlying infrastructure. According to Paul Vijender, head of security at Gauntlet, the greater risks lie in infrastructure, including key management systems, signing services, and cryptographic layers. A recent security breach at web infrastructure provider Vercel, which exposed customer API keys, highlights the importance of securing these components. Mythos, part of a new class of AI systems simulating adversaries, explores how protocols interact and tests small weaknesses to create real-world exploits. This approach has drawn attention from banks like JP Morgan, which are exploring tools like Mythos for stress testing. Early findings from models like Mythos have identified weaknesses in behind-the-scenes systems, including key protection technology and inter-system communication. Vijender emphasizes the value of AI models in discovering multi-step exploit chains and infrastructure-layer vulnerabilities that traditional audits may miss. The interconnected nature of DeFi protocols creates pathways for risk to spread, making it essential to map and exploit dependencies at scale. While some industry leaders see Mythos as an acceleration rather than a turning point, others believe it intensifies the already adversarial environment of DeFi. Aave Labs' founder, Stani Kulechov, notes that AI represents an evolution in the tools used to achieve exploits, and that DeFi is already built for machine-speed attacks. To defend against AI-driven threats, Gauntlet and Aave are adopting an AI-centric approach, focusing on continuous auditing, real-time simulation, and assuming breaches will happen. Aave has integrated AI into its workflows for simulations and code review, complementing human-led auditing. The long-term effect of AI on the crypto industry may be a divergence between secure and insecure protocols, with projects prioritizing security having a greater ability to test and harden systems.