Came across crypto.news: Monad co-founder Keone Hon is promoting the OpSec guide again and urging developers to run the open-source tool Ultrafuzz—the attackers are starting to use more powerful AI, too.
The key points: Ultrafuzz 9/10 is open source, using multiple agents for Solidity/Vyper contract fuzzing and threat hunting; it has been run for around 20+ rounds in the ecosystem. A pilot protocol uncovered about 27 issues (around 2 critical, 15 medium, and 10 low severity)—more than twice as many as the other single-AI auditing solutions evaluated at the time. The official guidance says it must be run in a disposable, isolated virtual machine—the agents have unrestricted permissions, so don’t run it on your local machine or on a machine that has keys.
The OpSec guide also cites ChainLight Lumos: from early 2023 through the reporting cutoff, losses from control hijacking totaled about $3.31 billion, while smart contract vulnerabilities accounted for about $983 million—key theft, phishing, and supply-chain attacks are often more costly than contract bugs.
AI is accelerating on both sides. Fuzzing and everyday OpSec need to be stepped up together.
#加密安全 #AI #Monad
The key points: Ultrafuzz 9/10 is open source, using multiple agents for Solidity/Vyper contract fuzzing and threat hunting; it has been run for around 20+ rounds in the ecosystem. A pilot protocol uncovered about 27 issues (around 2 critical, 15 medium, and 10 low severity)—more than twice as many as the other single-AI auditing solutions evaluated at the time. The official guidance says it must be run in a disposable, isolated virtual machine—the agents have unrestricted permissions, so don’t run it on your local machine or on a machine that has keys.
The OpSec guide also cites ChainLight Lumos: from early 2023 through the reporting cutoff, losses from control hijacking totaled about $3.31 billion, while smart contract vulnerabilities accounted for about $983 million—key theft, phishing, and supply-chain attacks are often more costly than contract bugs.
AI is accelerating on both sides. Fuzzing and everyday OpSec need to be stepped up together.
#加密安全 #AI #Monad
