Generative AI Fuels Surge in DeFi Hacks, Immunefi CEO Warns

The rise in decentralized finance (DeFi) hacks this year has a surprising primary cause: generative artificial intelligence. According to Mitchell Amador, CEO of Web3 security firm Immunefi, the latest AI models — including Claude Opus 4.8 and ChatGPT 5.5 — are empowering attackers to find and exploit vulnerabilities at an unprecedented pace.

AI as a double-edged sword for crypto security

In an interview with Cointelegraph, Amador stated that generative AI has become the main driver behind the increased frequency and sophistication of DeFi exploits in 2025. He described the next three to four years as a critical test for the cryptocurrency industry, predicting sustained pressure from hackers until security teams can deploy the same AI technology for defense.

The challenge, Amador explained, lies in the asymmetry of offense versus defense. Attackers can use AI to rapidly scan codebases for weaknesses and craft exploit payloads, while defenders must build entire systems that are impenetrable from every angle. He emphasized that the industry’s response must accelerate significantly to close this gap.

Crowdsourced security as a potential solution

Amador pointed to crowdsourced security solutions — such as bug bounty programs and coordinated vulnerability disclosure platforms — as a way to speed up the industry’s defensive response. By leveraging a global network of ethical hackers, DeFi projects can identify and patch vulnerabilities before malicious actors exploit them.

This approach has already shown promise. Immunefi, which operates one of the largest Web3 bug bounty platforms, has paid out hundreds of millions of dollars in bounties to security researchers who have helped prevent major losses. However, Amador cautioned that the adoption of such solutions remains uneven across the sector.

Why this matters for DeFi users and investors

For everyday users and institutional investors, the implications are clear. The security of DeFi protocols directly affects the safety of funds locked in smart contracts. As generative AI lowers the barrier for attackers, the pressure on development teams to harden their codebases grows. Projects that fail to adopt robust, proactive security measures may face existential risks.

The broader cryptocurrency market has also felt the impact. Major hacks have historically triggered sharp price drops and eroded trust in DeFi as a viable financial infrastructure. If the industry cannot demonstrate that it can defend against AI-powered attacks, broader adoption could stall.

Conclusion

Mitchell Amador’s warning underscores a pivotal moment for the DeFi ecosystem. Generative AI is not just a tool for innovation — it is actively reshaping the threat landscape. The next few years will determine whether the industry can adapt quickly enough to protect itself, or whether attackers will maintain the upper hand. Crowdsourced security may offer a viable path forward, but only if the sector embraces it at scale.

FAQs

Q1: How is generative AI being used to hack DeFi protocols?
Attackers use AI models to rapidly scan smart contract code for vulnerabilities, generate exploit code, and automate the process of finding weaknesses across multiple protocols simultaneously.

Q2: What is crowdsourced security in the context of DeFi?
Crowdsourced security involves bug bounty programs where independent ethical hackers are rewarded for finding and reporting vulnerabilities before they can be exploited maliciously. Platforms like Immunefi coordinate these efforts.

Q3: What can DeFi users do to protect themselves?
Users should prioritize protocols that have undergone multiple independent security audits, maintain active bug bounty programs, and have a proven track record of responding quickly to vulnerabilities. Diversifying funds across multiple platforms can also reduce risk.