OpenZeppelin CEO Manuel Aráoz has issued one of the starkest warnings in DeFi's history, declaring on X that he now considers "all" of decentralized finance unsafe — because AI coding agents have become "superhuman" at finding vulnerabilities in smart contracts. The asymmetry is brutal: defenders must patch every bug, while attackers need only one exploit to drain funds.
The alarm lands against a brutal backdrop. DeFi's total value locked has shed more than $20 billion since the start of the year, and over $1.1 billion has been lost to hacks in the past 12 months alone. April's $292 million Kelp DAO exploit — which cascaded through cross-chain infrastructure — and the $27 million Step Finance hack that shuttered the Solana-based project entirely are the headline casualties.
CoinDesk