AI × Crypto · Threat landscape
"Pennies": Why Security Leaders Think the Billion-Dollar Hacks Are the Warm-Up
TRM logs a 40% year-over-year rise in AI adoption across crypto crime — and the people who chase stolen funds for a living say today's losses will look small.
The warning, delivered through The Block by a group of industry security leads, is blunt: as autonomous AI agents mature, today's billion-dollar annual hack totals could "look like pennies." Behind the quote sits a number — TRM Labs tracks AI adoption across crypto crime up roughly 40% year over year.
The economics explain the alarm better than the rhetoric does. Historically, sophisticated attacks were constrained by sophisticated attackers: there are only so many people who can reverse-engineer a bridge contract or grind through wallet firmware. Agents dissolve that constraint. An exploit technique, once discovered, becomes software that runs against every eligible target simultaneously, around the clock, at the marginal cost of compute.
We've already seen the shape of it
This month's Coldcard drain was a preview: no phishing, no contact with victims — just patient, automated brute-force against a weakened keyspace, run at scale. Nothing about that operation required a human in the loop after setup. The same logic applies to scam conversations, which agents can now hold by the thousand, and to on-chain monitoring for exploitable deployments the moment they go live.
Defense is racing the same direction
The counter-argument, made by the same people issuing the warning: defenders get agents too. Automated monitoring flagged this month's LayerZero delegate abuse within hours; firms like TRM and Blockaid are effectively betting their businesses on machine-speed defense. The open question is asymmetry — attackers need one hole, defenders need to watch everything.
The Take
The correct read isn't fear; it's tempo. Every security habit that assumes a human attacker — "I'm too small to target," "I'd notice something weird" — quietly expires when targeting costs nothing. Small holders were never worth a skilled attacker's evening. To a script, everyone is worth a millisecond.