Top Audit Guru Alerts: All DeFi is Unsafe, Withdraw Now!

Odaily星球日报Publicado em 2026-05-28Última atualização em 2026-05-28

Resumo

Leading DeFi security auditor and OpenZeppelin founder Manuel Aráoz has issued a stark warning, declaring all DeFi protocols unsafe and advising the withdrawal of funds, even from established platforms like Aave and MakerDAO. This warning stems from the rapidly growing threat posed by AI-powered hacking tools. Aráoz highlights that AI agents can now identify and exploit smart contract vulnerabilities in minutes, a task that previously took expert teams weeks. This creates a critical asymmetry: defenders must patch every flaw, while attackers need only find one. Recent months have seen a surge in high-profile exploits, with billions lost in April and May alone across protocols like Drift Protocol, Kelp DAO, and THORChain. The acceleration is attributed to AI's ability to perform rapid code scanning, generate automated attack scripts, and even orchestrate social engineering and infrastructure attacks faster than human defenders can respond. The article cites Anthropic's powerful new AI model, Mythos, which demonstrated such proficiency in finding zero-day vulnerabilities that its public release was delayed over security concerns. This evolution fundamentally disrupts DeFi's risk-reward calculus. With yields on reliable protocols falling to single digits, users now face the potential of 100% capital loss for minimal returns. Aráoz's conclusion is that for most users, withdrawing funds to secure wallets is the most rational risk-management choice in the current landscape.

Original | Odaily Planet Daily (@OdailyChina)

Author | Azuma (@azuma_eth)

"I believe all DeFi is no longer secure."

This assertion left by Manuel Aráoz, founder of OpenZeppelin, on X yesterday is like a depth charge, once again shaking the already stagnant DeFi market.

Manuel even stated that he has started advising friends and family to withdraw funds from major DeFi protocols, including blue-chip protocols like Aave, MakerDAO, and Compound, which were once considered low-risk.

This is not alarmist talk from an outsider. On the contrary, Manuel himself is one of the core builders of the DeFi security ecosystem, and OpenZeppelin is one of the industry's most mainstream security auditing firms. Its contract libraries, security standards, and auditing frameworks have permeated almost the entire DeFi world.

The reason for Manuel's complete change in attitude lies in AI. Manuel pessimistically believes that the capability of AI Coding Agents to identify and exploit smart contract vulnerabilities is increasing exponentially.

This means that issues which previously took top white-hat teams weeks to discover might now be scanned by AI in minutes; where hackers needed to study protocol logic extensively, AI can now automatically analyze attack paths; where DeFi's "openness and transparency" was once an advantage, it has now become the best training corpus for attackers.

Manuel also mentioned a more fatal problem: smart contract security is essentially an extremely asymmetric game — defenders must patch all vulnerabilities, while attackers only need to find one to steal funds. As AI begins to exponentially enhance attack efficiency, this asymmetry is rapidly tilting out of balance.

The Icy Reality: DeFi Has Become a Hacker's ATM

Looking back at DeFi security incidents over the past few months, you'll find Manuel's concerns are not exaggerated.

April was arguably one of the worst months in DeFi history.

On April 1st, April Fool's Day, Drift Protocol suffered a theft of $280 million due to a manager privilege hijacking and multisig execution vulnerability (see April Fool's Joke? Drift Protocol Hacked for Over $280 Million, Possibly Becoming Solana Ecosystem's Second Largest DeFi Heist).
Subsequently on April 19th, Kelp DAO lost $292 million due to a breached bridge protocol (see Another $292 Million Stolen from DeFi, Is Even Aave Unsafe Now?). The hacker later escaped via lending protocols like Aave, casting a shadow of bad debts and their ripple effects over the entire DeFi space.

And since entering May, incidents have not decreased but rather further proliferated.

On May 15th, THORChain was attacked. A newly added node operator exploited a vulnerability in the GG20 threshold signature scheme (TSS) to reconstruct the vault's private key and directly execute outbound transactions, causing a loss exceeding $10 million.
On May 18th, Verus's bridge protocol was attacked. The attacker forged cross-chain import payloads to bypass verification and extract assets from the Ethereum reserves, stealing approximately $11.58 million.
On May 19th, Echo Protocol on Monad was attacked due to a private key leak. The attacker minted 1,000 eBTC (worth $76.7 million) and extracted funds via a previously tested attack path through Curvance.
On May 24th, StablR, a compliant stablecoin issuer under the MiCA regulatory framework, was attacked. The hacker profited over $2.8 million by minting EURR and USDR, causing EURR and USDR to depeg.
On May 25th, the SquidRouter module was attacked, resulting in the theft of approximately $3 million in assets from 86 Gnosis Safe wallets.
On May 27th, the StakeDAO deployer's private key was leaked on Arbitrum. The attacker minted about 5.45 trillion vsdCRV and partially exchanged them for 43.7 ETH to escape.

Frequently occurring security incidents have sounded the alarm. From on-chain code to off-chain management, DeFi seems to be losing ground across the board.

AI Has Become the Hacker's Nuclear Weapon

Why has the DeFi offensive-defensive balance suddenly collapsed this summer? Beyond the evolution of traditional hacking techniques, the rapid advancement of AI large language model capabilities is becoming the ultimate factor tipping the scales.

In the past, finding a complex smart contract vulnerability (especially one involving cross-chain interactions, multi-layer nesting, or extremely hidden reentrancy logic) required top-tier hackers weeks or even months of code analysis. However, with the maturation of AI agents possessing ultra-long context, strong logical reasoning, and autonomous tool-calling abilities, this has undergone a qualitative change.

Second-level Scanning and Global "Zero-day Vulnerability" Mining: Attackers only need to feed open-source code repositories to new-generation AI reasoning models, and AI can, within seconds, deduce hundreds of extreme interaction scenarios like a seasoned security expert, precisely identifying boundary conditions that human auditors might miss due to fatigue.
Automated Attack Script Generation: AI can not only discover vulnerabilities but also automatically write, test, and deploy "hacker smart contracts" designed to extract funds.
Perfect Orchestration of Off-chain DevOps and Social Engineering: AI can impersonate a perfect developer for phishing or monitor a DeFi team's GitHub commits 24/7. Once the team uploads code containing sensitive information or unverified fixes, AI can launch an attack within seconds—far faster than any human security personnel can respond.

In this AI-augmented security war, hackers, armed with AI, possess nearly unlimited ammunition and attack speeds measured in seconds. In contrast, DeFi, constrained by slow-paced governance voting, multisig confirmations, and delayed security audits, struggles to mount a corresponding defense.

Last month, Anthropic, the AI development company behind Claude, officially announced its new-generation model, Mythos (see Anthropic Develops the Most Powerful AI Model in History, But Dares Not Release It...). This is the first model in human history to exceed ten trillion parameters (in contrast, current mainstream models range from hundreds of billions to one trillion parameters), with a staggering training cost of $10 billion.

However, due to Mythos's specialized capabilities in cybersecurity (Anthropic disclosed that they identified thousands of zero-day vulnerabilities using Mythos in just a few weeks), the company even dares not release the model publicly directly, fearing malicious use by hacker groups. Instead, they plan to allow leading tech giants to test it first through a "Project Glasswing" to patch potential vulnerabilities in advance.

If the current DeFi security landscape is already this severe, it's hard to imagine what new threats industry security defenses will face once Mythos is publicly released.

The Biggest Problem: The Risk-Reward Ratio Has Long Been Out of Balance

For ordinary DeFi participants, liquidity providers (LPs), and whales, the most important issue now is to sit down and do the math.

For a long time, the reason users chose to deposit funds into DeFi was the pursuit of annualized yields several times higher than those in traditional finance. During bull markets or frenzied periods of liquidity mining, yields of 10%, 20%, or even higher were enough to cover people's psychological expectations for "potential technical risks."

But today, this underlying logic has long been shaken, even overturned. The risk-reward ratio of DeFi is already out of balance. On the reward side, as the market enters a phase of stock game competition and security cushions thicken, the real yields of most mainstream, relatively reliable DeFi protocols have fallen back to single-digit percentages. On the risk side, users' principal is exposed to a black box that could be breached by AI at any moment, emptied by flash loans in an instant. Once a protocol is hacked, token prices plummeting to zero and liquidity pools being drained often happen within minutes, with no legal recourse, insurance, or central bank to cover the losses.

The gamble of risking 100% principal loss for an annualized return of around 5% is clearly not a worthwhile bet.

Manuel's words may be somewhat absolute, but they tear off DeFi's final fig leaf. In the face of the reality where hackers have made AI a conventional weapon and security incidents keep erupting in the industry, if you are not mentally prepared to risk losing 100% of your principal for a certain return, then "withdrawing funds as soon as possible and securing profits" might be the most rational, most risk-control-compliant choice in the current market cycle.

Perguntas relacionadas

QAccording to the article, who is Manuel Aráoz and why is his warning about DeFi security considered significant?

AManuel Aráoz is the founder of OpenZeppelin, a leading security audit firm in the crypto industry. His warning is significant because he is a core builder of the DeFi security system, and his company's contract libraries, security standards, and audit frameworks are widely used across the DeFi ecosystem. His shift in stance carries substantial weight due to his deep expertise and role in the industry.

QWhat is the primary reason cited by Manuel Aráoz for his belief that all DeFi is now insecure?

AThe primary reason is the exponential improvement in AI (specifically AI Coding Agents) in identifying and exploiting smart contract vulnerabilities. AI can now find issues in minutes that once took top security teams weeks, automate the analysis of attack paths, and leverage the public nature of DeFi code as training data. This massively amplifies the inherent asymmetry in security where attackers need only find one flaw while defenders must patch all of them.

QWhat is the 'Mythos' model mentioned in the article, and why is it considered a potential threat?

AMythos is a new AI model developed by Anthropic, the company behind Claude. It is the first model to surpass 10 trillion parameters, with a training cost of $10 billion. It is considered a potential threat because Anthropic disclosed that in just a few weeks, Mythos identified thousands of zero-day vulnerabilities. Due to its specialized capabilities in cybersecurity, Anthropic is hesitant to release it publicly for fear it could be maliciously used by hackers to exploit vulnerabilities at an unprecedented scale.

QThe article argues that the risk-reward ratio for DeFi participation has become unbalanced. What is the core of this argument?

AThe core argument is that the potential rewards (returns) from mainstream DeFi protocols have fallen to single-digit percentages in the current market, while the risks have skyrocketed. Users now risk losing 100% of their principal in minutes due to AI-enhanced hacks, with no legal recourse, insurance, or central bank backstop. The article frames this as an irrational trade-off: risking total loss for a relatively low annual yield.

QBesides smart contract code, what other aspects of DeFi infrastructure have been targeted in recent hacks according to the article's examples?

ARecent hacks have targeted vulnerabilities beyond just smart contract code. Examples include bridge protocols (Kelp DAO, Verus), management/private key compromises (Drift Protocol, StakeDAO, Echo Protocol), threshold signature schemes (THORChain), and wallet management modules (SquidRouter). This indicates that security weaknesses exist across the entire DeFi stack, from on-chain code to off-chain operational and key management practices.

Leituras Relacionadas

Fei-Fei Li's Team Clarifies the Concept of 'World Models', Sora Merely a Renderer

"World Models" has become a widely used yet confusing term in AI. To address this, a team led by Fei-Fei Li and World Labs proposed a functional taxonomy based on the Partially Observable Markov Decision Process framework. This taxonomy categorizes systems called "world models" into three distinct projections: Renderers, Simulators, and Planners. Renderers, like OpenAI's Sora and other video generation models, focus on producing photorealistic visual outputs for human perception. They prioritize visual fidelity over physical accuracy. Simulators, such as NVIDIA Omniverse, aim to compute precise future environmental states for computational tasks like engineering analysis or digital twins. Planners, like Vision-Language-Action models, take in observations and goals to output executable actions for robots or agents. The article clarifies that most current "world models," including Sora, are primarily Renderers. They generate convincing visuals but lack the core ability to simulate state transitions based on actions, a key requirement for a true world model in classic reinforcement learning definitions. This conceptual confusion has practical implications, leading to potential misalignment in technology selection, investment, and public understanding of AI capabilities. Clear categorization is crucial. It helps enterprises avoid costly mistakes (e.g., using a renderer for robot training), allows investors to accurately assess markets, and enables researchers to build comparable benchmarks. While future systems may integrate these functions, recognizing current boundaries is essential for honest assessment and progress.

marsbitHá 6m

Fei-Fei Li's Team Clarifies the Concept of 'World Models', Sora Merely a Renderer

marsbitHá 6m

From Web3 to AI Agent: Veteran Crypto VC Variant Bets $300 Million on Pivot

Variant Fund has announced the launch of Variant 4, a new $222 million early-stage venture fund. Its investment thesis has evolved from "digital ownership" to a broader theme of "sovereignty," focusing on technologies that enhance user agency—the control individuals have over their lives, assets, and identity. The firm distinguishes between mere automation and systems that genuinely empower users, emphasizing that the key question is who ultimately benefits: the user or the platform. This new framework encompasses Variant's existing investments in areas like public blockchains (Ethereum, Solana), developer infrastructure, decentralized finance (e.g., Uniswap), and consumer applications. It also informs recent early bets on projects such as Honcho (for self-custodial AI agent memory), Octet (cryptographic verification of physical location), and here.now (an "agent cloud" for owning and composing generative content). Variant's core mission remains to back founders building technologies that expand user sovereignty, moving towards an internet where users possess unprecedented agency rather than being the product.

marsbitHá 11m

From Web3 to AI Agent: Veteran Crypto VC Variant Bets $300 Million on Pivot

marsbitHá 11m

Solana Explosive Growth Pushes Its Monthly Perps Volume Beyond Prior Records

Despite bearish market conditions and price volatility, Solana is demonstrating significant strength in its derivatives market. The network's monthly perpetual futures volume has surged to a new record, exceeding $76.7 billion in May 2026—a 34% increase from the previous high. This growth reflects heightened speculative activity and trader engagement. Analysts note that perpetual contracts are becoming crucial financial primitives, with Solana positioning itself as a network for genuine on-chain price discovery and execution. Concurrently, Solana is experiencing a massive increase in stablecoin activity, processing over $79.9 billion in stablecoin volume in one week, underscoring its role as a major hub for on-chain liquidity and transactions.

bitcoinistHá 19m

Solana Explosive Growth Pushes Its Monthly Perps Volume Beyond Prior Records

bitcoinistHá 19m

Bloomberg Uncovered: How Do China's Wealthy Circumvent the Annual $50,000 Limit to Transfer Assets?

**Summary: How Wealthy Chinese Circumvent $50,000 Annual Foreign Exchange Limits** Despite China's strict capital controls, including an annual $50,000 per person foreign exchange quota, an estimated $150 billion in funds still leaves the country annually via various gray and underground channels. This report outlines the evolution of China's "capital wall" and the methods used to bypass it. **The Evolving Capital Controls:** * **Foundation (1994):** The system of "current account convertibility with strict capital account controls" was established. * **Quota Set (2007):** The $50,000 individual annual forex purchase limit was formalized. * **Crackdown Begins (2015-2017):** Following market volatility, enforcement tightened. Banks were required to scrutinize transactions, and channels like using UnionPay cards for Hong Kong insurance premiums or buying overseas property were blocked. * **Digital & Legal Upgrades (2024-2026):** Enhanced algorithms now flag suspicious patterns (e.g., "smurfing"). The Common Reporting Standard (CRS) provides Chinese tax authorities with data on citizens' offshore accounts. Unlicensed cross-border brokers have been targeted. **Five Primary Methods for Moving Capital:** 1. **Underground Banking / "Hawala" (Duiqiao):** The largest-scale method. No money crosses borders. Clients pay RMB to a domestic account; an overseas associate deposits equivalent foreign currency into the client's offshore account. Risks include high fees, account freezes, and legal penalties. 2. **"Smurfing" or "Ant Moving":** Using multiple individuals' $50,000 quotas to pool funds for one offshore recipient. Increasingly detected by anti-money laundering algorithms. 3. **Trade Invoice Manipulation:** Businesses over-invoice imports or under-invoice exports via offshore shell companies, creating a pretext to transfer excess funds abroad under the guise of trade. 4. **Channel Migration:** After a crackdown on internet brokers, funds flow toward more compliant but costly channels like major banks' cross-border wealth management services or Qualified Domestic Institutional Investor (QDII) quotas. 5. **Structural Arrangements:** High-net-worth individuals use complex, high-cost legal structures involving offshore trusts, insurance, and investment migration programs to transfer asset ownership. **Regulatory Response: Focusing on People, Not Just Money** The current strategy extends oversight from enterprises to **individual residents**. Tools like CRS allow retroactive visibility into offshore assets. Cryptocurrencies, once seen as a potential loophole, are now actively monitored and prosecuted as an illegal channel. The underlying driver remains: with significant wealth concentrated among millions of affluent households seeking diversification amid domestic economic shifts, the incentive to move assets offshore persists despite regulatory barriers.

marsbitHá 25m

Bloomberg Uncovered: How Do China's Wealthy Circumvent the Annual $50,000 Limit to Transfer Assets?

marsbitHá 25m

Ethereum's Ballmer Moment: As Everyone Is Bearish, the Circulating Supply Is Disappearing

"Ethereum's Ballmer Moment: Circulation Shrinks Amid Bearish Sentiment" Amid widespread bearish sentiment, with prominent figures like Bankless founder David Hoffman selling ETH and young developers flocking to Solana, some argue Ethereum is entering its "Ballmer era"—akin to Microsoft's perceived stagnation under Steve Ballmer. While surface-level criticisms about slow protocol development, cautious leadership, and competitive pressure are valid, underlying fundamentals tell a different story. Approximately 30% of ETH is staked, major holders like BitMine are accumulating, and spot ETFs continue to absorb supply. Regulatory clarity, including the SEC/CFTC's March ruling on staking rewards and the potential passage of the CLARITY Act, is transforming crypto from a regulatory threat into a legitimized framework. This institutionalization, alongside a shrinking circulating supply (with net issuance around 0.23% annually), creates significant buy-side pressure independent of fee-based value capture. The broader crypto total addressable market is expanding through regulated stablecoins, tokenized assets, and institutional adoption. While public chains face competition from permissioned alternatives, the winning model appears to be permissioned assets settling on public chains like Ethereum and Solana. The author advocates a non-maximalist, barbell strategy: holding ETH for its institutional role and supply squeeze, SOL for consumer/throughput trends, BTC as a macro hedge, and a basket of next-gen L1s. Key bullish drivers for ETH include rapid circulation shrinkage, potential Q2 staked ETF approvals, regulatory tailwinds solidifying its role as a default settlement layer, and the optionality of an eventual "Satya moment" leadership shift. Despite bearish consensus, the current setup—where crypto is "not hot" and regulatory groundwork is being laid—presents a compelling investment opportunity. The crypto cycle's focus may have shifted to AI, but blockchain infrastructure is gaining a legal and institutional foothold precisely while attention is elsewhere.

marsbitHá 26m

Ethereum's Ballmer Moment: As Everyone Is Bearish, the Circulating Supply Is Disappearing