DeFi

GoPlus Security

Tornado Cash

Security

The series of attacks on the Ethereum mainnet that led to over $1.5 million in losses has been exacerbated by new research that shows that artificial intelligence (AI) agents can now autonomously discover and exploit vulnerabilities in decentralized finance protocols.Security firm GoPlus Security reported that four separate contracts were exploited in just 48 hours ending April 29. The firm warned that hackers armed with AI are becoming more precise and faster than ever.And DeFi smart contract developers have nowhere to turn to except AI to tackle the problems that AI itself started.<h3 id="span-can-ai-really-hack-defi-by-itself-span">Can AI really hack DeFi by itself?</h3><a href="https://a16zcrypto.com/posts/article/ai-agents-defi-exploits" rel="noopener noreferrer nofollow">a16z crypto</a> tested an off-the-shelf AI coding agent against 20 past price manipulation incidents on Ethereum and found that when given just a contract address and basic tools, the AI succeeded in exploiting the vulnerability only 10% of the time.&nbsp;However, when researchers gave the agent access to structured knowledge about common attack patterns like vault donation exploits and automated market maker (AMM) pool manipulation, the success rate jumped to 70%.The researchers noted that while the AI is very good at finding bugs, it sometimes struggles with complex, multi-step attacks. One agent even tried to “escape” its test environment by extracting a secret key to look at future block data.Anthropic recently <a href="https://www.cryptopolitan.com/cybersecurity-risks-anthropic-latest-models/" rel="noopener noreferrer nofollow">announced</a> a new AI model called “Claude Mythos Preview.” The company stated that this model can autonomously find and write working exploits for zero-day vulnerabilities across major operating systems and web browsers.&nbsp;Before <a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer nofollow">Mythos Preview</a>, older models had a “near-0% success rate” at writing exploits. The company also confirmed that the same improvements that make the model good at patching vulnerabilities also make it good at exploiting them.&nbsp;When given access to Etherscan’s transaction API, the agent found actual past attack transactions and reverse-engineered them to write its own exploit code.&nbsp;<h3 id="span-how-much-was-lost-in-the-zetachain-hack-span">How much was lost in the ZetaChain hack?</h3><a href="https://x.com/GoPlusSecurity/status/2049385842645623264" rel="noopener noreferrer nofollow">GoPlus Security</a> flagged four separate smart contract exploits on Ethereum mainnet within a 48-hour window ending April 29. The combined losses exceeded $1.5 million. The firm has described the current pace of AI-assisted attacks as a “countdown-by-the-second era.”&nbsp;In one of the week’s larger incidents, approximately $333,868 was drained across nine transactions on four chains, including Ethereum, Arbitrum, Base, and BSC. ZetaChain’s official <a href="https://zetachain.notion.site/post-mortem-4-26-2026" rel="noopener noreferrer nofollow">post-mortem report</a> says that no user funds were lost; the three affected wallets belonged to the ZetaChain team.&nbsp;The attacker took advantage of a feature in the GatewayEVM contract using “arbitrary calls.” The gateway lacked a strict blocklist, allowing the hacker to instruct it to transfer token allowances that had been set by the team wallets.The hacker funded wallets through Tornado Cash three days before the attack while mimicking a victim’s wallet.&nbsp;<a href="https://www.cryptopolitan.com/zetachain-transactions-attack-team-wallets/" rel="noopener noreferrer nofollow">ZetaChain</a> admitted that the vulnerability had been reported earlier through its bug bounty program, but the initial reports were dismissed. The protocol has since paused cross-chain transactions and is rolling out a patch to disable the risky code.&nbsp;Other Ethereum exploits identified by GoPlus Security over the past 48 hours include an onchain aggregator contract that lost roughly $983,000 due to missing access controls; an unauthorized third-party vault tied to TradingProtocol that lost roughly $398,000 also due to missing permission checks; a BCB contract that lost roughly $39,800 from a reentrancy vulnerability; and a QNT asset contract that lost roughly $124,900 from an arbitrary call vulnerability.&nbsp;Cryptopolitan reports that <a href="https://www.cryptopolitan.com/institutions-bullish-defi-lose-trust-in-pool/" rel="noopener noreferrer nofollow">DeFi losses in April</a> alone have reached record levels, surpassing the combined stats for the first three months of the year.With mounting losses in recent cases, it is setting up an epic showdown where hackers and developers are fighting AI with AI. With Anthropic’s Mythos and others now entering the conversation, it is looking like AI is arming hackers and developers won’t have any choice but to use AI to defend themselves&nbsp;Don’t just read crypto news. Understand it. Subscribe to our newsletter. <a href="https://www.cryptopolitan.com/newsletters/?utm_source=cp&amp;utm_medium=web&amp;utm_campaign=inlineAds" rel="noopener noreferrer nofollow">It's free</a>.

DeFi faces rising losses as AI-driven attacks escalate

Table of Contents

Cryptopolitan_News

Other articles published on Apr 29, 2026

XRP Targets $13 as ETF Inflows and Whale Buying Rise

Chainlink Ccip Drives $1.3 Billion Weekly Volume

Amazon Web Services Adds Three Chainlink Services To Its Marketplace

Strait of Hormuz: Trump Says Iran Wants Waterway Open Amid Efforts to End War

Fed Rate Hike Odds Surge: Wall Street Now Bets on Tightening

DXY Surges Past 99.00 on Hawkish Powell Remarks Before Sharp Intraday Reversal

Join our free newsletter for daily crypto updates!