# DeFi Security Debated as AI Agents Increase Vulnerability Risks

**Published:** 2026-05-28T18:05:47.000Z  
**Topic:** Uniswap  
**Sentiment:** neutral  
**Publisher:** TrendWatcher — https://www.trendwatcher.in/article/94cdd577-a5cd-4a00-ba6b-6dca41d248c3

Experts are divided on whether AI agents have made DeFi unsafe, as concerns over automated exploit discovery clash with new defensive infrastructure.

Manuel Aráoz, co-founder of the security firm OpenZeppelin, recently advised investors to exit all decentralized finance (DeFi) positions, citing the rise of autonomous AI coding agents that can identify smart contract vulnerabilities at superhuman speeds [1, 2]. This warning arrives as the DeFi sector faces a period of significant instability, with total value locked (TVL) dropping from $172 billion in mid-April to $148 billion amid a wave of exploits that have cost the industry over $1.1 billion in the past year [1, 3].

**Key takeaways**
* Manuel Aráoz argues that AI agents have created an asymmetric security environment where attackers only need one exploit to succeed, while developers must fix every bug [1, 2].
* DeFi has seen $1.1 billion in losses to exploits over the past year, contributing to a decline in total value locked from $172 billion to $148 billion [1].
* Some industry leaders, including Aave’s Stani Kulechov, contend that recent security failures are primarily due to operational lapses like stolen keys rather than flaws in audited code [1].
* Protocols are increasingly adopting "AI-versus-AI" strategies, utilizing automated monitoring, circuit breakers, and runtime protections to mitigate risks [1].

## The Asymmetry of AI-Driven Exploits
The core of the security debate lies in the speed at which AI can map vulnerabilities. According to research from a16z, AI agents have consistently identified core weaknesses in historical DeFi exploits, providing attackers with a starting point that significantly lowers the barrier to entry [1]. Because DeFi protocols are public and composable, these agents can scan code and governance structures at near-zero cost [1]. This capability has led firms like Anthropic to restrict access to models like Claude Mythos, which possess the capacity to autonomously discover and weaponize software flaws [1, 2]. Aráoz maintains that this development makes the entire sector unsafe, as the traditional model of point-in-time audits cannot keep pace with AI-assisted discovery [1, 3].

## Defensive Shifts in Protocol Infrastructure
Despite these warnings, several prominent figures in the industry argue that DeFi is more resilient than it appears. Aave founder Stani Kulechov and OpenZeppelin representatives suggest that many recent losses were not caused by smart contract code flaws, but by "Web2-style" operational failures, such as social engineering, bridge spoofing, and the compromise of private keys [1]. For instance, the $285 million loss at Drift Protocol was attributed to a six-month social engineering campaign [1]. 

To counter the evolving threat, developers are integrating AI into their own defensive stacks. Platforms like Nansen and Cyvers are utilizing AI to find and eradicate bugs before they can be exploited, while Uniswap and OpenZeppelin have launched tools to assist in secure contract deployment [1]. This transition toward continuous, automated monitoring and the use of circuit breakers represents a shift in how protocols manage risk, prioritizing the ability to pause or limit damage during an incident over the hope of achieving perfect, bug-free code [1].

## Why it matters
The industry is currently navigating a fundamental change in its security model, moving from static, manual reviews toward a dynamic, AI-driven environment. While the potential for AI to accelerate attacks is clear, the sector's response highlights a growing reliance on infrastructure-level safeguards like multisig controls and real-time transaction monitoring. As DeFi protocols balance the need for open access with the necessity of defensive intervention, the effectiveness of these automated systems will likely determine the sector's ability to maintain user confidence against increasingly sophisticated, AI-enabled threats.

## Sources
1. Cryptoslate — [Have AI agents made the entire $148 billion DeFi sector unsafe?](https://cryptoslate.com/have-ai-agents-made-the-entire-148-billion-defi-sector-unsafe/)
2. Forklog — [OpenZeppelin Attributes DeFi Vulnerability to AI... | ForkLog](https://forklog.com/en/openzeppelin-attributes-defi-vulnerability-to-ai-advancements/)
3. Cryip — [OpenZeppelin Founder Warns AI Has Made “All of DeFi” Unsafe as...](https://cryip.co/openzeppelin-founder-warns-ai-has-made-all-of-defi-unsafe-as-exploits-accelerate/)

---
Cite as: TrendWatcher, "DeFi Security Debated as AI Agents Increase Vulnerability Risks", https://www.trendwatcher.in/article/94cdd577-a5cd-4a00-ba6b-6dca41d248c3