모든 DeFi는 안전하지 않은가? Openzeppelin 창립자가 개인 투자자들에게 블루칩 탈출을 경고한 후 업계 리더들이 반박하다

📄전체 원문· trafilatura에 의해 자동 추출됨6702 자

Openzeppelin co-founder Manuel Aráoz sparked widespread industry debate by calling decentralized finance ( DeFi) unsafe. Industry leaders counter that Aráoz’s framing overstates the risk, pointing out that DeFi lending security has improved by roughly 98% since 2020. Is All DeFi Unsafe? Industry Leaders Push Back After Openzeppelin Founder Warns Retail to Exit Blue-Chips Key Takeaways - Openzeppelin founder Manuel Aráoz’s recent comments reignited DeFi security fears. - 0G Labs CEO Heinrich noted a 98% lift in lending safety since 2020, undercutting claims that all DeFi is unsafe. - Fan of Cysic eyes a fivefold insurance surge by 2029, urging regulators to target opsec over AI code. Shifting From Drama to Data When Openzeppelin co-founder and former Chief Technology Officer (CTO) Manuel Aráoz characterized decentralized finance ( DeFi) as entirely unsafe, it rattled an industry already reeling from a spike in hacks. Highlighting that vulnerability, a recent analysis by blockchain security firm Peckshield found that cross-chain protocol exploits alone drained $328.6 million between the start of the year and mid-May. Aráoz’s viral warnings forced Openzeppelin to publicly distance itself from some of his claims, but the remarks succeeded in sparking a fierce debate over DeFi security. Still, critics dismissed his dramatic language as a self-serving attempt to stir fear and panic. Others, like Leo Fan, founder of Cysic, believe the framing undermines the credibility of a message that has a real core. “Wrapping it in ‘exit everything’ turns a needed warning into doomer content,” Fan said. “You don’t need drama to move people in this space; you need a number.” The same sentiment is echoed by Michael Heinrich, co-founder and CEO of 0G Labs, who points to the approximately 98% improvement in DeFi lending security from its 2020 baseline. Heinrich also highlights the markedly reduced daily loss rates on major lending protocols, now around 0.001%, as another factor that undercuts Aráoz’s “all DeFi is unsafe” comments. “Telling retail to exit blue-chips like Aave and Maker doesn’t match the actual risk-adjusted picture,” Heinrich told Bitcoin.com News. In making the argument against DeFi, Aráoz insisted that artificial intelligence (AI) coding agents have become incredibly advanced at scanning open-source smart contracts and identifying complex exploitable flaws at machine speed. The threat posed by these agents is so great that he has privately advised his friends and family to completely exit their positions in major, long-established “blue-chip” DeFi protocols. The Death of the Static Audit However, Heinrich and Fan argue that the rise of superhuman AI attackers does not mean defenders should abandon ship. Instead, they say it requires a fundamental shift in how the industry approaches security. “The point-in-time audit is already dead; people just haven’t held the funeral,” Fan said. He warned that shifting entirely from audits to bug bounties is the wrong lesson. “You don’t replace prevention with monitoring — you collapse the gap between them.” According to Heinrich, relying on an annual audit is no longer a credible defense. Instead, the future of smart contract security relies on a machine-speed, layered defense pipeline where audits serve as the first checkpoint rather than a single event. He outlined a four-layer security stack: pre-deployment AI-assisted audits paired with human review, continuous post-deployment monitoring, well-funded bug bounties, and verifiable AI on the defender side. The ultimate goal, Heinrich noted, is incorporating formal verification on critical paths—using mathematical proofs rather than subjective reviews—alongside continuous AI-augmented reviews running against live contracts the same way attackers operate. “Audits don’t go away,” he said. “They become the first checkpoint in a machine-speed defense pipeline.” Beyond preventative security pipelines, the conversation around risk mitigation inevitably turns to insurance, a primitive that Heinrich notes remains severely underdeveloped in the crypto ecosystem. According to Heinrich, a few structural hurdles keep the decentralized insurance sector constrained. First, insurance pools lock up capital that could otherwise earn active yield elsewhere in DeFi. To illustrate this point, Heinrich points to market leader Nexus Mutual, which holds approximately $190 million against a broader DeFi market that fluctuated between $40 billion and over $100 billion in total value locked. Heinrich notes that this capital ratio is structurally thin. Another hurdle is defining what constitutes an on-chain exploit, which he describes as a non-trivial exercise. Despite these hurdles, Heinrich argues that enforcing insurance mandates across protocols is the wrong tool to drive adoption. Instead, the industry must innovate at the product level. “What actually moves the needle are parametric on-chain products that pay out automatically on verifiable signals, and protocols that bundle insurance into the product the way clearing fees work in traditional markets,” Heinrich said. Regulating Operations, Not Just Code While the current safety net is narrow, market demand is accelerating. According to a March 2026 forecast by Coinlaw, the decentralized insurance market is projected to grow nearly fivefold by 2029. “The capital is coming,” Heinrich noted. “What’s missing is the product surface to deploy it.” The industry’s internal shift toward machine-speed defense and automated safety nets raises broader questions about regulatory oversight. As policymakers increasingly scrutinize digital asset security, Fan cautions that regulators risk hyper-focusing on the wrong threats, such as the specter of rogue AI systems. “The smarter regulatory instinct isn’t to panic about AI attackers specifically,” Fan said. “It’s to focus on the operational layer where the money actually leaves: key custody, multisig governance, bridge security, and incident response.” Fan argues that by enforcing strict operational security standards on these specific vectors, oversight bodies could eliminate the vast majority of real-world capital losses. Focusing exclusively on smart-contract code while neglecting day-to-day operations, he warned, amounts to “regulating the 10% and missing the 90%.” Furthermore, Fan pointed out a technical primitive that policymakers consistently undervalue: advanced cryptography. “Cryptographic proof, like zero-knowledge proofs, of what code ran and that it ran correctly is a far better compliance primitive than a PDF audit report,” Fan said. “It is auditable by math, not by trust. That’s where I’d want regulatory energy going.”

데이터 상태✓ 전체 내용 추출 완료원문 읽기 (Bitcoin.com)

🔍과거 유사 사건· 키워드 + 종목 매칭6 건

2026-05-27

블록체인 보안 전문가, AI 에이전트가 감사자를 앞지르면서 모든 DeFi가 안전하지 않다고 경고

유사도 230%關鍵字 unsafe/all/warns

2026-05-28

트레이더들이 3억 5,200만 달러 청산 사태 이후 Bitcoin을 73,000달러 위로 끌어올리다

유사도 180%關鍵字 push/back/after

2026-05-27

암호화폐의 최대 거래소들이 기관 자본을 유치하기 위해 토큰 공시 표준화를 추진하는 데 힘을 보태다

유사도 180%關鍵字 push/back/industry

2026-05-19