Crypto Bug Bounties Surge with AI-Generated Reports

Cryptocurrency protocols are grappling with a surge in bug bounty submissions fueled by artificial intelligence tools, which have dramatically increased both legitimate vulnerability reports and low-quality false positives, straining security teams across the industry.

Bug bounty programs, which incentivize ethical hackers to identify and disclose software flaws before malicious actors exploit them, have long been a cornerstone of security in the decentralized finance sector. These initiatives are particularly vital for crypto projects, which often handle substantial user funds through open-source codebases vulnerable to attacks. However, the rise of AI has lowered the barriers to generating reports, leading to an influx that includes inaccurate or incomplete findings, often described as "AI slop" by developers.

Barry Plunkett, co-CEO of Cosmos Labs, highlighted the scale of the issue on Tuesday. "Our program has seen a 900 increase in submission volume from last year, on the order of 20-50 per day," he said, noting that the uptick encompasses a mix of valid threats and invalid claims. This volume has forced teams to devote more resources to triage, separating genuine risks from...