Hacking threats targeting crypto wallets are shifting from code exploits toward psychological manipulation tactics. Michael Coates, the new Chief Information Security Officer (CISO) at the Solana Foundation, warned that rapid advances in artificial intelligence (AI) and deepfake technology will trigger a new wave of security challenges for blockchain users.
Coates brings extensive experience in securing user data on a global scale. Before joining the Solana Foundation earlier this year, he served as CISO at Twitter (now rebranded as X) and led the security department at Mozilla. Drawing from his experience protecting infrastructure at both tech giants, he sees a shifting attack pattern now targeting the Web3 industry.
No Longer Targeting Smart Contracts
Coates believes recent crypto fraud trends are gradually moving away from traditional methods. Hacking incidents are no longer dominated by attackers persistently dissecting lines of code to find vulnerabilities in smart contracts. Instead, fraudsters are turning to advanced social engineering tactics, leveraging fake identities and AI-driven manipulative campaigns to directly target asset holders.
This perspective aligns with a string of multimillion-dollar incidents in the past. Multiple large-scale crypto hacks actually stemmed from routine operational security oversights or conventional Web2 vulnerabilities. Such flaws often serve as gateways for attackers to gain unauthorized access, leading to compromised private keys. Once a private key is exposed, every cryptographic defense layer on the blockchain becomes useless.
The Danger of Calls Mimicking Colleagues
The rise of AI has accelerated fraudsters’ ability to execute social engineering schemes that are increasingly difficult to detect. Coates predicts attackers will soon bombard victims with spoofed phone calls to execute mass scams. These calls not only spoof caller IDs on screens, but also feature cloned AI voices precisely mimicking the speech patterns of people the victims know.
To curb these emerging threats, Coates emphasizes that developers must fortify network infrastructure from within. He stresses the need to build multi-layered security systems to lock down access across vulnerable entry points. He also highlighted the necessity of implementing post-quantum algorithms to protect users right from initial wallet setup, safeguarding their funds against future computing exploit threats.
Blockchain infrastructure is designed to be tamper-proof, yet user vigilance can easily falter. When deepfake tools can replicate a colleague’s voice giving instructions over a phone call, healthy skepticism toward any crypto transfer request becomes the sole defense line that code cannot provide.
Reported by CoinDesk.
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
