What to know : OpenZeppelin CEO Manuel Aráoz warned that he now considers all of DeFi unsafe, arguing that AI coding agents have become “superhuman” at finding vulnerabilities in smart contracts. His comments come amid a sharp decline of more than $20 billion in DeFi’s total value locked this year and over $1.1 billion lost to hacks in the past 12 months, including high-profile exploits at Kelp DAO and Step Finance. The rise of powerful AI models like Anthropic’s restricted Claude Mythos, which can autonomously discover and weaponize software flaws, is raising new concerns that DeFi’s transparent, on-chain code may be increasingly difficult to defend at human speed.
OpenZeppelin CEO Manuel Araoz said he now considers "all" of decentralized finance (DeFi) unsafe because coding agents have become "superhuman" at finding vulnerabilities in a post on X Wednesday.
The warning from one of crypto's top security executives comes as DeFi's total value locked has dropped by over $20 billion since the start of the year, according to DeFiLlama data. While some of that reflects broader crypto price weakness, the sector has also been battered by a steady stream of exploits that continue to test confidence in onchain finance.
DefiLlama data shows that more than $1.1 billion has been lost to DeFi hacks over the past 365 days, including April's $292 million Kelp DAO exploit, which exposed how vulnerabilities in cross-chain infrastructure can quickly spill into the broader ecosystem. Solana-based Step Finance, meanwhile, shut down earlier this year after a $27 million exploit left the project unable to recover.
Araoz's comments also arrive as Anthropic has warned that its restricted Claude Mythos AI model can autonomously discover software vulnerabilities and develop working exploits at a level the company says surpasses existing automated tools.
That raises uncomfortable questions for DeFi, whose core security model was designed around human attackers operating at human speed.
DeFi's transparency, long marketed as a strength, could become a liability if machine systems can scan publicly available smart contract code, identify weaknesses and weaponize them faster than defenders can patch them.
免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到support@aicoin.com，本平台相关工作人员将会进行核查。
