Bitget App
Trade smarter
Buy cryptoMarketsTradeFuturesStocksEarnInstitutionAI & More
When Hackers Become State Actors and AI: A Security Self-Assessment Checklist for Crypto Projects in 2026

When Hackers Become State Actors and AI: A Security Self-Assessment Checklist for Crypto Projects in 2026

ChainFeedsChainFeeds2025/12/11 07:33
Show original
By:链上启示录

Chainfeeds Guide:

Over the past decade, the crypto world has spent a great deal of time proving that it is not a Ponzi scheme; in the next decade, it needs to demonstrate with the same determination that it is secure enough to bear serious capital.

Source:

Author:

On-chain Apocalypse

Opinion:

On-chain Apocalypse: This year, crypto attacks have shown a new kind of symmetry: the number of incidents has decreased, but the destructiveness of each attack has increased significantly. The mid-2025 report released by SlowMist shows that the crypto industry experienced 121 security incidents in the first half of the year—a 45% decrease from 223 incidents in the same period last year. This should be good news, but the losses from these attacks soared from $1.43 billion to about $2.37 billion, an increase of 66%. Attackers are no longer wasting time on low-value targets, but are focusing on high-value assets and high-tech barriers. Decentralized Finance (DeFi) remains the main battlefield for attackers, accounting for 76% of attack incidents. However, despite the high proportion of incidents (92 cases), losses from DeFi protocols dropped from $659 million in 2024 to $470 million. This trend indicates that the security of smart contracts is gradually improving, with the popularization of formal verification, bug bounty programs, and runtime protection tools building a stronger defense for DeFi. But this does not mean that DeFi protocols are already safe. Attackers have shifted their focus to more complex vulnerabilities, seeking opportunities that can bring greater returns. Meanwhile, centralized exchanges (CEX) have become the main source of losses. Although there were only 11 attack incidents, the losses reached as high as $1.883 billion, with a single well-known exchange suffering a loss of $1.46 billion—one of the largest single attack incidents in crypto history (even exceeding the $625 million Ronin incident). These attacks did not rely on on-chain vulnerabilities, but stemmed from account hijacking, internal privilege abuse, and social engineering attacks. This "efficiency gap" has also led to a polarization of attack targets: DeFi battlefield: technology-intensive—attackers need to deeply understand smart contract logic, discover reentrancy vulnerabilities, and exploit flaws in AMM pricing mechanisms; CEX battlefield: privilege-intensive—the goal is not to crack the code, but to gain access to accounts, API keys, and multi-signature wallet signing rights. At the same time, attack methods are also evolving. The first half of 2025 saw a series of new types of attacks: phishing attacks exploiting the EIP-7702 authorization mechanism, investment scams using deepfake technology to impersonate exchange executives, and malicious browser plugins disguised as Web3 security tools. A deepfake scam ring busted by Hong Kong police caused losses of over HK$34 million—the victims thought they were video chatting with real crypto influencers, but in fact, the other party was an AI-generated virtual persona.

0
0

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

Understand the market, then trade.
Bitget offers one-stop trading for cryptocurrencies, stocks, and gold.
Trade now!

You may also like

If US Treasury yields continue to rise, what will Washington do next?

The Treasury has maintained liquidity by increasing the issuance of short-term Treasury bills and conducting small-scale buybacks. Some advocate for reducing expenditures to address the debt burden. Political constraints tilt the risk toward inflation, which harms bondholders' interests. Karen Brettell, Reuters, October 5 - The cost of borrowing for the U.S. government is rising, while it has almost exhausted straightforward ways to control those costs. Long-term Treasury yields are now near their highest levels in two decades, and the causes don't appear to be temporary. Washington is issuing large amounts of government debt to cover a fiscal deficit that shows no signs of shrinking. Inflation is cooling only slowly. Moreover, while the real estate and automotive sectors are struggling, the artificial intelligence investment boom is keeping the economy robust enough to prevent interest rates from falling. As a result, with over $40 trillion in debt, annual interest payments alone amount to around $1 trillion. Washington has options, from relying more on short-term borrowing to, in the most extreme case, having the Federal Reserve cap long-term yields. The more policymakers resort to such measures, the higher the risk of fueling inflation, potentially causing more pain for bondholders in the future. Torsten Slok, Chief Economist at Apollo Global Management, noted that for every $5 the government collects in taxes, $1 goes to service the debt. "That's a very, very high number, and it's only going to grow." U.S. President Donald Trump said in a September 28 interview with Time magazine that debt can be repaid through economic growth or inflation. But if these methods fail, the Treasury has other options ranging from moderate to radical. At present, the Treasury is increasingly relying on issuing short-term bills and conducting small-scale buybacks of old debt to help boost market liquidity. In a worse scenario, the next step would require Fed intervention. One method is large-scale purchases of long-term bonds, akin to 1961's "Operation Twist", another is directly capping long-term yields—a measure not used by the U.S. since World War II. The more aggressive the measures, the more they can suppress rates, but also the greater the risk of spurring inflation. “We are getting to a point where it's clear the government is uncomfortable with current rate levels," said Jeffrey Gundlach, CEO of DoubleLine Capital, at a recent investment event. Operation Twist Historically, the next escalation would likely be a full-scale reactivation of "Operation Twist." Launched in 1961, this strategy involved selling short-term Treasuries and purchasing long-term ones to flatten the yield curve. Implementing a substantial twist would require the Fed's assistance, but the Fed may stand pat unless there is an obvious financial emergency. Slok said that without the Fed's balance sheet, the Treasury has very limited tools for lowering rates. However, Fed Chair Kevin Warsh has criticized holding large amounts of government debt and other securities, arguing that massive bond buying blurs the line between monetary policy and government debt management. He has called for a new agreement between the Treasury and the Fed, under which the Fed Chair and Treasury Secretary would communicate publicly about the Fed's balance sheet and the Treasury’s debt issuance plans. Yield Curve Control If Operation Twist–style purchases don't work, the next move would be explicit yield curve control. In this scenario, the central bank commits to buying an unlimited amount of government debt to keep long-term rates under a set cap. From 1942 until the 1951 Treasury-Fed Accord, the Fed capped long-term Treasury yields at 2.5% to help fund WWII and the postwar recovery. The Bank of Japan implemented a version of this policy from 2016 to 2024. By artificially lowering rates, yield curve control can ease the political pressure of fiscal deficits. But it only works as long as investors aren't worried about being repaid with dollars devalued by inflation. Once that confidence is shaken, bond-buying meant to suppress rates only fuels the inflation it's designed to conceal. Veronique de Rugy, Senior Research Fellow at the Mercatus Center at George Mason University, said that ultimately, the only way to solve the debt problem is by cutting expenditures. “Congress needs to implement fiscal consolidation—in other words, austerity. The Fed cannot do this alone.” Divergent Paths John Higgins, Chief Economic Advisor at Capital Economics, notes that since World War II, the U.S. has only significantly reduced its debt-to-GDP ratio twice, but bondholders' experiences differed substantially each time. After the war, the debt-to-GDP ratio fell from about 106% in 1946 to 23% in 1974, while the 10-year Treasury yield climbed from 2.2% to 7.5%. In the 1990s, the ratio declined from 48% to 32%, and yields fell as well. What made the difference? After WWII, restr

路透社•2026/10/05 10:11