AI-Driven Hacks Hinder Institutional Blockchain Adoption

Conventional financial institutions are increasingly interested in moving trillions of dollars in assets onto decentralized ledgers to capture operational efficiencies [2]. However, this transition is currently stalled as conservative capital allocators weigh the significant risks posed by AI-powered hackers and smart contract vulnerabilities [2].

Key takeaways

• Blockchain security firm CertiK reports that AI-driven attacks are a primary blocker for traditional finance (TradFi) moving assets on-chain [2].
• April 2025 was recorded as the worst month for crypto hacks in four years, with only three days passing without an exploit [2].
• Hackers are increasingly using AI to scan for vulnerabilities, while defenders are often limited by strict, localized project budgets [2].
• Recent high-profile incidents include a $1.46 billion attack on Bybit in February 2025 and nearly $600 million drained from Drift Protocol and Kelp Dao [2].

The Structural Disadvantage in Security

Ronghui Gu, CEO of the blockchain security firm CertiK, notes that while institutions anticipate moving tens of trillions of dollars on-chain over the next decade, the current operational environment is too risky [2]. The threat landscape has evolved significantly, with CertiK attributing a sudden rise in daily hacks to the use of artificial intelligence by malicious actors [2]. These attackers utilize AI to execute complex exploits, including oracle manipulation, cross-chain bridge hacks, and smart contract vulnerabilities [2].

A significant challenge for the industry is the "unfair sport" created by the disparity in resources between attackers and defenders [2]. Because hackers target protocols with massive total value locked (TVL), they are economically incentivized to invest heavily in their operations [2]. An attacker might spend $10,000 to $20,000 in tokens to keep automated engines running continuous vulnerability scans for weeks [2]. In contrast, security firms like CertiK operate under strict budgetary constraints and business contracts that limit their scanning time to a few hours, creating a structural gap that leaves protocols exposed to relentless, automated probing [2].

Why it matters

The persistent threat of cyberattacks has created a dilemma for legacy financial institutions that want to modernize their infrastructure but cannot justify the security risks [2]. With DefiLlama data indicating that over $1.1 billion has been lost to DeFi hacks in a single year, the vulnerabilities inherent in cross-chain infrastructure remain a major concern [2]. As AI continues to increase the speed and efficiency of these exploits, CertiK warns that the high frequency of attacks observed in early 2025 may persist throughout the remainder of the year, potentially delaying the broader integration of traditional capital into the blockchain ecosystem [2].