AI is making crypto security audits obsolete faster

Updated on Thursday 9 July 2026 

Security researchers are urging decentralised finance protocols to reaudit their smart contracts continuously, as artificial intelligence speeds up how quickly hackers can find flaws.

A single audit carried out at a project's launch is no longer enough. TRM Labs' head of policy told Cointelegraph that attack techniques are moving faster than a single audit from launch day can account for. A review built for last year's attack patterns can leave a protocol exposed to this year's.

Security firm CertiK reported that hackers stole $1.32 billion in the first half of 2026. Some attackers appear to be relying on improved automated tooling to spot latent vulnerabilities at scale, including inside old, unmaintained code. Two recent cases illustrate the pattern: on 14 June, an attacker exploited a flaw in Aztec Connect, a bridge shut down since March 2023, draining $2.1 million.

Five days later, a contract on the mySwap exchange, whose interface had been closed to new deposits for more than six months, lost $300,000. More than $72 billion remains locked across decentralised finance, according to real-time tracking data from DefiLlama, keeping the incentive to attack high. AI has also played a defensive role: a security researcher recently used a custom auditing tool built on Anthropic's Claude Opus 4.8 to uncover a four-year-old vulnerability in the Zcash network, which has since been patched.

CertiK warned that projects operating legacy infrastructure should treat reauditing as a recurring operational requirement rather than a one-off exercise. TRM Labs also stressed that hardening code is not enough: countering state-linked cyberactivity, including from North Korea, and disrupting money-laundering networks remain part of the task.

Sources: Cointelegraph, "AI is shortening the shelf life of crypto security audits, researchers warn", 9 July 2026; CertiK, Hack3d H1 2026 report, 6 July 2026; DefiLlama, real-time TVL tracking data, 9 July 2026; Shielded Labs, disclosure on the Zcash Orchard vulnerability, June 2026.