Anthropic's AI hacker Mythos awakens, DeFi falls on a large scale OpenZeppelin founder Manuel Ar á oz recently posted that "all DeFi, including Aave and MakerDAO, are no longer secure. ”I privately suggest that friends and family withdraw all their blue chip DeFi positions. In April 2026, DeFi experienced 14 hacking incidents worth over a million dollars in a single month, resulting in a total loss of over 630 million dollars KelpDAO: $292 million, used DDoS to force the protocol to use tampered RPC nodes and forge cross chain transactions; Drift: $285 million, Lazarus Group social worker lured security committee members into pre signing malicious transactions; Hyperbridge: Cross chain bridge verification vulnerability, directly minting $1 billion worth of DOT tokens on Ethereum The entire DeFi TVL rapidly declined from $172 billion to $148 billion. More and more major attacks are no longer caused by coding errors, but rather by the underlying infrastructure RPC node, signature system, cross chain bridge, oracle, permission backend The logic of DeFi security in the past has always been to search for code vulnerabilities and conduct contract audits. But code auditing can only look at a single protocol, and DeFi has never been an isolated system. The sharing of liquidity, shared oracle, multi-layer integration, innovation sources, and risk transmission paths between protocols have always been the same path. After the emergence of AI, attackers can map the vulnerable points of the entire ecosystem on a large scale and automatically find the most lethal combination. Anthropic has confirmed that the Mythos level model will be available to all clients within a few weeks at the earliest. The Mythos model is essentially an AI hacker simulator that directly studies how to connect multiple protocols, bridges, oracle machines, RPC nodes, signature systems, and other seemingly insignificant small problems together to form a real attack path. The future DeFi will only become increasingly insecure. On chain users need to reassess whether it is still worth bearing the risk of capital theft for the sake of that rate of return.