CertiK CEO Ronghui Gu is sounding the alarm: April 2025 was the worst month for DeFi security in four years, with exploits recorded on 27 out of 30 days. Gu attributes the surge directly to AI-accelerated attacks targeting smart contracts, oracle feeds, and cross-chain bridges — and warns the near-daily pace could persist through year-end.
The stakes are enormous. Traditional financial institutions are actively exploring moving trillions — potentially tens of trillions — of dollars of assets onchain over the next decade. But Gu says security risk is the primary blocker. The $1.46 billion Bybit hack in February 2025, described as the largest crypto theft ever, and nearly $600 million drained from Drift Protocol and Kelp DAO by North Korean cybercriminals in April, illustrate exactly what conservative capital allocators fear.
Gu frames the problem as a structurally unfair fight.
CoinDesk