CertiK Flags Deepfakes and Phishing as Top 2026 Crypto Threats

The warning follows a wave of large-scale attacks that have pushed industry losses past $600 million in the first months of the year.

Crypto News

Phishing attacks, real-time deepfakes, supply chain compromises, and cross-chain vulnerabilities are the threat vectors most likely to drive major crypto exploits through the rest of 2026, according to CertiK senior

investigator Natalie Newson. The warning follows a wave of large-scale attacks that have pushed industry losses past $600 million in the first months of the year.

Two North Korea-linked incidents in April account for the bulk of those losses. The $293 million Kelp DAO exploit on Saturday traced back to a single point-of-trust failure in LayerZero's cross-chain messaging infrastructure. A separate $280 million exploit targeted Drift Protocol.

A third DPRK-affiliated attack, disclosed by crypto wallet Zerion on April 15, involved AI-assisted social engineering. Hackers used AI tools in a sustained operation that ultimately extracted about $100,000 from the company's hot wallets, illustrating how AI is already being applied offensively against

platforms.

Newson said AI will make several attack categories harder to defend against. "There are now more convincing deepfakes, autonomous attack agents, and 'agentic AI' that can autonomously scan smart contracts for bugs, draft exploit code and execute attacks at machine speed," she said. A threat actor identified as "Jinkusu" was reported on April 6 to be selling tools designed to bypass Know Your Customer checks at banks and crypto exchanges using deepfakes and voice manipulation.