所有 DeFi 都不安全嗎？在 Openzeppelin 創始人警告散戶退出藍籌股後，行業領袖予以反擊

📄完整原文· 由 trafilatura 自动抓取6702 字

Openzeppelin co-founder Manuel Aráoz sparked widespread industry debate by calling decentralized finance ( DeFi) unsafe. Industry leaders counter that Aráoz’s framing overstates the risk, pointing out that DeFi lending security has improved by roughly 98% since 2020. Is All DeFi Unsafe? Industry Leaders Push Back After Openzeppelin Founder Warns Retail to Exit Blue-Chips Key Takeaways - Openzeppelin founder Manuel Aráoz’s recent comments reignited DeFi security fears. - 0G Labs CEO Heinrich noted a 98% lift in lending safety since 2020, undercutting claims that all DeFi is unsafe. - Fan of Cysic eyes a fivefold insurance surge by 2029, urging regulators to target opsec over AI code. Shifting From Drama to Data When Openzeppelin co-founder and former Chief Technology Officer (CTO) Manuel Aráoz characterized decentralized finance ( DeFi) as entirely unsafe, it rattled an industry already reeling from a spike in hacks. Highlighting that vulnerability, a recent analysis by blockchain security firm Peckshield found that cross-chain protocol exploits alone drained $328.6 million between the start of the year and mid-May. Aráoz’s viral warnings forced Openzeppelin to publicly distance itself from some of his claims, but the remarks succeeded in sparking a fierce debate over DeFi security. Still, critics dismissed his dramatic language as a self-serving attempt to stir fear and panic. Others, like Leo Fan, founder of Cysic, believe the framing undermines the credibility of a message that has a real core. “Wrapping it in ‘exit everything’ turns a needed warning into doomer content,” Fan said. “You don’t need drama to move people in this space; you need a number.” The same sentiment is echoed by Michael Heinrich, co-founder and CEO of 0G Labs, who points to the approximately 98% improvement in DeFi lending security from its 2020 baseline. Heinrich also highlights the markedly reduced daily loss rates on major lending protocols, now around 0.001%, as another factor that undercuts Aráoz’s “all DeFi is unsafe” comments. “Telling retail to exit blue-chips like Aave and Maker doesn’t match the actual risk-adjusted picture,” Heinrich told Bitcoin.com News. In making the argument against DeFi, Aráoz insisted that artificial intelligence (AI) coding agents have become incredibly advanced at scanning open-source smart contracts and identifying complex exploitable flaws at machine speed. The threat posed by these agents is so great that he has privately advised his friends and family to completely exit their positions in major, long-established “blue-chip” DeFi protocols. The Death of the Static Audit However, Heinrich and Fan argue that the rise of superhuman AI attackers does not mean defenders should abandon ship. Instead, they say it requires a fundamental shift in how the industry approaches security. “The point-in-time audit is already dead; people just haven’t held the funeral,” Fan said. He warned that shifting entirely from audits to bug bounties is the wrong lesson. “You don’t replace prevention with monitoring — you collapse the gap between them.” According to Heinrich, relying on an annual audit is no longer a credible defense. Instead, the future of smart contract security relies on a machine-speed, layered defense pipeline where audits serve as the first checkpoint rather than a single event. He outlined a four-layer security stack: pre-deployment AI-assisted audits paired with human review, continuous post-deployment monitoring, well-funded bug bounties, and verifiable AI on the defender side. The ultimate goal, Heinrich noted, is incorporating formal verification on critical paths—using mathematical proofs rather than subjective reviews—alongside continuous AI-augmented reviews running against live contracts the same way attackers operate. “Audits don’t go away,” he said. “They become the first checkpoint in a machine-speed defense pipeline.” Beyond preventative security pipelines, the conversation around risk mitigation inevitably turns to insurance, a primitive that Heinrich notes remains severely underdeveloped in the crypto ecosystem. According to Heinrich, a few structural hurdles keep the decentralized insurance sector constrained. First, insurance pools lock up capital that could otherwise earn active yield elsewhere in DeFi. To illustrate this point, Heinrich points to market leader Nexus Mutual, which holds approximately $190 million against a broader DeFi market that fluctuated between $40 billion and over $100 billion in total value locked. Heinrich notes that this capital ratio is structurally thin. Another hurdle is defining what constitutes an on-chain exploit, which he describes as a non-trivial exercise. Despite these hurdles, Heinrich argues that enforcing insurance mandates across protocols is the wrong tool to drive adoption. Instead, the industry must innovate at the product level. “What actually moves the needle are parametric on-chain products that pay out automatically on verifiable signals, and protocols that bundle insurance into the product the way clearing fees work in traditional markets,” Heinrich said. Regulating Operations, Not Just Code While the current safety net is narrow, market demand is accelerating. According to a March 2026 forecast by Coinlaw, the decentralized insurance market is projected to grow nearly fivefold by 2029. “The capital is coming,” Heinrich noted. “What’s missing is the product surface to deploy it.” The industry’s internal shift toward machine-speed defense and automated safety nets raises broader questions about regulatory oversight. As policymakers increasingly scrutinize digital asset security, Fan cautions that regulators risk hyper-focusing on the wrong threats, such as the specter of rogue AI systems. “The smarter regulatory instinct isn’t to panic about AI attackers specifically,” Fan said. “It’s to focus on the operational layer where the money actually leaves: key custody, multisig governance, bridge security, and incident response.” Fan argues that by enforcing strict operational security standards on these specific vectors, oversight bodies could eliminate the vast majority of real-world capital losses. Focusing exclusively on smart-contract code while neglecting day-to-day operations, he warned, amounts to “regulating the 10% and missing the 90%.” Furthermore, Fan pointed out a technical primitive that policymakers consistently undervalue: advanced cryptography. “Cryptographic proof, like zero-knowledge proofs, of what code ran and that it ran correctly is a far better compliance primitive than a PDF audit report,” Fan said. “It is auditable by math, not by trust. That’s where I’d want regulatory energy going.”

数据状态✓ 已抓取全文阅读原文（Bitcoin.com）

🔍历史类似事件· 关键词 + 标的比对6 则

2026-05-27

区块链安全专家警告称，随着 AI Agents 的发展速度超过审计人员，所有 DeFi 均不安全

相似度 230%關鍵字 unsafe/all/warns

2026-05-28

交易者在3.52亿美元清算扫荡后将Bitcoin推回73,000美元上方

相似度 180%關鍵字 push/back/after

2026-05-27

加密货币最大的交易所支持推动代币披露标准，行业争取机构资本

相似度 180%關鍵字 push/back/industry

2026-05-19

比特币交易者在Trump冻结对Iran的回应后将BTC推回77,000美元

相似度 180%關鍵字 push/back/after

2026-05-13

内华达州监管机构在预测市场会议将其归咎于相关举措后进行反击

相似度 180%關鍵字 push/back/after

2026-05-03

在 DeFi 被駭浪潮後，Ethereum 退出隊列激增 72,000%

相似度 180%關鍵字 after/defi/exit

💡 目前用关键词 + 标的比对（MVP）· 之后会升级为 embedding 语义搜寻

原始信息

ID：8abe4ec649

来源：Bitcoin.com

发布：2026-05-31 05:30:47

分类：一般 · 导出分类 neutral

标的：未指定

社群投票：+0 / −0 · ⭐ 0 重要 · 💬 0 留言