The latest warning about AI’s cybersecurity implications didn’t come from a successful cyberattack, but from a cryptocurrency flaw hiding in plain sight.
Using Anthropic’s Claude Opus model, a researcher uncovered a uncovered a glaring vulnerability in Zcash cryptocurrency that could have enabled the creation of unlimited counterfeit tokens, Bloomberg reported. The discovery sent shockwaves through the digital assets industry and raised fresh concerns about whether other critical systems harbor similar weaknesses.
The value of the Zcash token plummeted by nearly half after the organization disclosed the flaw, which had apparently gone undetected by conventional cybersecurity methods for four years.
Although a researcher discovered the vulnerability in this case, Zcash creator Eli Ben-Sasson warned that similar weaknesses may exist in other digital assets systems. Next time, he cautioned, it could be cybercriminals who find and exploit them.
A Frequent Target
Digital assets have altered the course of the financial services industry, but they have also become frequent targets for cybercriminals.
Many of the initial concerns surrounding crypto centered on the possibility that decentralized finance systems could be exploited for fraud and money laundering. Those concerns have proven well founded. According to Chainalysis, cryptocurrency-related money laundering rose from $10 billion to $82 billion in the last six years.
Cryptocurrencies have also become a favored vehicle for scammers. The FBI’s annual Internet Crime Report found that the largest financial losses reported last year stemmed from cryptocurrency investment scams.
Threatening the Organization
While AI can be leveraged to bolster crypto-related fraud and money laundering, it is also creating a broader threat: the organizations themselves. Unfortunately, this threat is not limited to the digital assets industry.
The launch of Anthropic’s Mythos model raised concerns worldwide after the company reported that the system had identified thousands of previously unknown vulnerabilities across organizations in multiple sectors. Following the disclosure, cybersecurity firm Palo Alto Networks warned that AI-driven attacks were inciting a new wave of fraud that could place unprecedented strain on cybersecurity defenses.
These developments have prompted many organizations to reevaluate their defenses. They have also heightened concerns among regulators. The U.S. government has taken steps to limit the scope of Mythos amid growing concerns about its capabilities, while policymakers and industry leaders have increasingly called for stronger AI oversight and regulation.