AI tools like Mythos are making crypto security audits cheaper and faster, potentially reshaping industry standards for due diligence.
AI tools like Mythos could reshape crypto security standards, making audits more accessible and efficient for developers and institutions.
The emergence of AI-driven security solutions, particularly with the introduction of Mythos, is set to transform the landscape of due diligence in the cryptocurrency sector. This tool is designed to autonomously identify vulnerabilities in code, potentially lowering the costs associated with smart contract audits significantly.
As these AI systems become quicker and more affordable, experts believe they will change expectations for security diligence in crypto projects. Alexander Urbelis, chief information security officer at ENS Labs, highlighted that AI could reduce audit costs to nearly zero. Tasks that previously took considerable time and financial resources could now be executed in a matter of minutes, enabling projects that lacked the budget for thorough reviews to obtain essential security evaluations.
Historically, the expense of comprehensive audits has hindered the security of smart contracts. However, the rollout of AI tools like Mythos, which was briefly available before being pulled from the U.S. market, provides a more budget-friendly alternative. These advancements allow for a shift from traditional auditing methods to continuous monitoring of smart contracts, which may lead to a more proactive approach in identifying and mitigating risks.
David Schwed, COO of blockchain security firm SVRN, emphasized that the real transformation lies in the ability to conduct ongoing audits rather than one-time assessments. He noted that if security evaluations become more affordable and consistent, it could redefine the industry's standard of care in smart contract development.
Despite the benefits of AI in spotting coding flaws, experts caution that it cannot fully replace human oversight. Many significant losses in the crypto space often stem from social engineering and operational failures rather than technical bugs. Urbelis pointed out that while AI tools can identify coding errors, they are not equipped to understand the economic implications or human factors that can lead to major financial losses.
Schwed echoed this sentiment, stating that while AI can enhance security processes, it cannot substitute the nuanced judgment that experienced auditors provide. He warned against relying solely on automated tools without human evaluation, as this could create a false sense of security.
As AI-driven security evaluations become more prevalent, experts speculate that investors may begin to expect such assessments before funding projects, raising the stakes for developers who neglect to utilize these advanced tools. The evolving landscape suggests that while AI may not eliminate all risks, it could significantly alter the operational costs associated with vulnerability detection and the expectations surrounding security diligence in the cryptocurrency sector.
