CertiK Warns AI and Supply-Chain Attacks Will Drive Crypto Hacks in 2026

Michael Coates, the Solana Foundation’s new chief information security officer, said the leading threat to blockchain users is shifting away from flaws in smart contracts toward AI-enabled social engineering and fabricated identities. The warning matters because generative AI can make fraudulent messages, personas and interactions appear more credible at scale, challenging an industry whose defenses have traditionally focused on code audits and technical exploits.

Coates said recently that AI is making cryptocurrency scams more convincing, prompting the Solana Foundation to assess post-quantum cryptography and advocate security systems that protect users by default. The approach would move more responsibility from individuals to wallets, protocols and platforms designed to block deceptive activity before funds are transferred. The report did not specify a budget, testing timetable or deployment date, indicating that the post-quantum work remains under evaluation rather than a confirmed network upgrade.

Crypto wrench attacks use physical violence, detention or home intrusion to force digital-asset holders to surrender private keys or transfer funds. As cryptocurrency ownership expands, such crimes have become a growing security concern beyond conventional hacks and smart-contract exploits. They also expose a critical weakness in digital wealth protection: sophisticated wallet safeguards offer limited defense when attackers can identify and physically target an owner.

CertiK said global crypto wrench attacks rose 33.3% year on year in the first half of 2026, while financial exposure surged roughly twelvefold to $124 million. Home invasions overtook kidnappings as the leading form of attack during the six-month period, marking a shift toward assaults at victims’ residences. Europe accounted for 75% of reported cases, making it by far the largest regional concentration identified in the blockchain security company’s report.

The cryptocurrency industry has long faced the risk of breaches targeting exchanges, DeFi protocols and wallets, with security firm CertiK tracking losses from onchain attacks. While the decline in total losses may appear encouraging, it does not mean defenses have improved in tandem. Attack methods and the damage caused by individual incidents remain key measures of the ecosystem’s security.

Crypto hacks caused $1.32 billion in losses from January through June 2026, down about 46.8% from the same period in 2025, according to CertiK. The firm warned, however, that the decline could create a false impression of improved security. Attackers are becoming increasingly sophisticated and destructive, while North Korean hackers remain a major threat.

Cryptocurrency platforms have long faced risks from smart-contract and system vulnerabilities, and generative AI is rapidly lowering the barriers for attackers to find, analyze and exploit weaknesses. Mitchell Amador, CEO of blockchain security platform Immunefi, said the proliferation of new models such as Claude Opus 4.8 and ChatGPT 5.5 has fueled a “vulnerability apocalypse” in crypto security.

Amador said AI models are a leading cause of the surge in cryptocurrency hacks and losses in 2026. More than $634 million was stolen from crypto platforms in April 2026 alone, marking both a sharp increase in monthly security losses and the highest level since early 2025. The figures underscore the need for operators to accelerate improvements in vulnerability detection and defenses.

Once private keys are stolen in a cryptocurrency transaction, the assets are usually difficult to recover. Wallets, exchanges and smart contracts have therefore long been targets for hackers. Ledger Chief Technology Officer Charles Guillemet said generative AI can quickly identify vulnerabilities, write malware and launch social-engineering attacks, sharply reducing the expertise and cost required.

As of July 2026, crypto-related attacks had caused $1.4 billion in losses over the previous year. Guillemet urged the industry to adopt formal verification, which uses mathematical methods to validate that software works correctly, and to strengthen hardware-level protections. He also advised investors to plan their asset custody on the assumption that many software and internet-connected systems could eventually be compromised.