Ethereum smart contracts exploited by AI: GPT-5 and Claude demonstrate million-dollar vulnerabilities

cryptonews

10 hours ago

AI agents are now capable of exploiting smart contracts on Ethereum and other blockchains, raising urgent questions about the economic risks of autonomous cyber capabilities. Summary Frontier AI...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Most Discussed

{"basename":"","ssrTDKData":{"titleTemplate":"%s - Tiger Brokers","title":"Tiger Brokers | Global Stocks, Options & Futures Trading App","description":"Tiger Brokers, one-stop investment in US stocks, SGX stocks, HK stocks, A-shares & other global assets. One of the best stock trading platforms in Singapore.","keywords":"tiger brokers,tiger trade,tiger brokers singapore,broker online,stock trading in singapore,share trading singapore,brokerage firm singapore,trading app,stock broker singapore,stock trading platforms,trading account","social":{"ogDescription":"Tiger Brokers, one-stop investment in US stocks, SGX stocks, HK stocks, A-shares & other global assets. One of the best stock trading platforms in Singapore.","ogImage":"https://c1.itigergrowtha.com/portal5/static/media/og-logo.be62fbe1.png","ogUrl":"https://www-web.itiger.com/news/2588806989"},"companyName":"Tiger Brokers"},"pageData":{"isMobile":false,"isTiger":false,"isTTM":true,"region":"SGP","license":"TBSG","edition":"fundamental"},"isCrawlerRequest":true,"__swrFallback__":{"@#url:\"https://stock-news.skytigris.cn/v3/news\",params:#id:\"2588806989\",edition:\"fundamental\",auth_exemption:1,,,undefined,":{"share":"https://ttm.financial/m/news/2588806989?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2025-12-03 05:17","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2588806989","market":"us","top_or_hot":-1,"title":"Ethereum smart contracts exploited by AI: GPT-5 and Claude demonstrate million-dollar vulnerabilities","media":"cryptonews","content":"<div>\n<p>AI agents are now capable of exploiting smart contracts on Ethereum and other blockchains, raising urgent questions about the economic risks of autonomous cyber capabilities. \n\n\nSummary\n\n\n\nFrontier AI...</p>\n\n<a href=\"https://crypto.news/ethereum-smart-contracts-exploited-by-ai-gpt-5-and-claude-demonstrate-million-dollar-vulnerabilities/\">Source Link</a>\n\n</div>\n","source":"crypto_news_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Ethereum smart contracts exploited by AI: GPT-5 and Claude demonstrate million-dollar vulnerabilities</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nEthereum smart contracts exploited by AI: GPT-5 and Claude demonstrate million-dollar vulnerabilities\n</h2>\n\n<h4 class=\"meta\">\n\n\n2025-12-03 05:17 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://crypto.news/ethereum-smart-contracts-exploited-by-ai-gpt-5-and-claude-demonstrate-million-dollar-vulnerabilities/><strong>cryptonews</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>AI agents are now capable of exploiting smart contracts on Ethereum and other blockchains, raising urgent questions about the economic risks of autonomous cyber capabilities. \n\n\nSummary\n\n\n\nFrontier AI...</p>\n\n<a href=\"https://crypto.news/ethereum-smart-contracts-exploited-by-ai-gpt-5-and-claude-demonstrate-million-dollar-vulnerabilities/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"BK4528","symbol_name":"SaaS概念","start_time":0,"source_url":"https://crypto.news/ethereum-smart-contracts-exploited-by-ai-gpt-5-and-claude-demonstrate-million-dollar-vulnerabilities/","article_id":"2588806989","we_media_id":null,"thumbnails":[],"rights":{"source":"crypto_news_highlight","url":"https://crypto.news/ethereum-smart-contracts-exploited-by-ai-gpt-5-and-claude-demonstrate-million-dollar-vulnerabilities/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2588806989","pubTimestamp":1764710278,"columns":[],"sourceInfo":{"source_id":"crypto_news_highlight","name":"Crypto News"},"weMediaInfo":null,"summary":"AI agents are now capable of exploiting smart contracts on Ethereum and other blockchains, raising urgent questions about the economic risks of autonomous cyber capabilities.Frontier AI models, including GPT-5 and Claude, exploited smart contracts on Ethereum and other blockchains in simulated tests.A joint project by Anthropic and MATS Fellows used the newly created Smart CONtracts Exploitation benchmark  to test AI models against 405 real-world contracts exploited between 2020 and 2025.Traditional cybersecurity benchmarks measure success by detection rates or arbitrary scores, but SCONE-bench evaluates AI exploits in financial terms, providing a more tangible measure of risk. Smart contracts are particularly well-suited for this approach because vulnerabilities can directly translate into stolen funds, and simulations allow researchers to quantify the potential losses.Over all 405 contracts in SCONE-bench, 10 AI models produced exploits for 207 contracts, totaling $550.1 million in s","collect":0,"end_time":0,"defaultTopTitle":"crypto.news","property":[],"viewcount":null,"language":"en","relate_stocks":{"BK4528":"SaaS概念","GPT":"Intelligent alpha atlas ETF","09046":"华夏以太币-U","AI":"C3.ai, Inc.","BK4588":"碎股","GPT.AU":"GPT GROUP","BK4601":"加密货币现货ETF","FETH":"以太币ETF-Fidelity","BK4543":"AI","QETH":"以太坊ETF-Invesco Galaxy","BK7087":"多样化房地产投资信托v","BK4023":"应用软件","ETHV":"以太坊ETF-VanEck","BK4551":"寇图资本持仓","EZET":"以太坊ETF-Franklin","09009":"博时以太币-U","CETH":"以太坊ETF-21Shares","BK4585":"ETF&股票定投概念","09179":"嘉实以太币-U","BK4587":"ChatGPT概念","BK7510":"REITs概念"},"translate_title":"被AI利用的以太币智能合约：GPT-5和Claude展示百万美元漏洞","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"CETH":1.5,"FETH":1.5,"09009":1.5,"EZET":1.5,"AI":0.9,"GPT.AU":1.5,"QETH":1.5,"GPT":1.5,"09179":1.5,"09046":1.5,"ETHV":1.5,"METHmain":1.5},"content_text":"AI agents are now capable of exploiting smart contracts on Ethereum and other blockchains, raising urgent questions about the economic risks of autonomous cyber capabilities. \n\n\nSummary\n\n\n\nFrontier AI models, including GPT-5 and Claude, exploited smart contracts on Ethereum and other blockchains in simulated tests.\nThe AI models discovered previously unknown security flaws—called zero-day vulnerabilities—in software (in this case, smart contracts on Ethereum).\nFindings highlight the urgent need for proactive AI-powered defense strategies, as AI agents now rival human hackers in identifying profitable blockchain exploits. \n\n\n\nA joint project by Anthropic and MATS Fellows used the newly created Smart CONtracts Exploitation benchmark (SCONE-bench) to test AI models against 405 real-world contracts exploited between 2020 and 2025.\nIn simulated attacks on contracts exploited after March 2025, Claude Opus 4.5, Claude Sonnet 4.5, and GPT-5 produced exploits collectively worth $4.6 million, demonstrating a concrete lower bound on the potential financial damage AI could cause. Extending the tests to 2,849 recently deployed contracts with no known vulnerabilities, GPT-5 and Sonnet 4.5 uncovered two novel zero-day vulnerabilities, generating simulated profits of nearly $3,700.\nSCONE-bench: Quantifying exploits in dollars, not bugs\nTraditional cybersecurity benchmarks measure success by detection rates or arbitrary scores, but SCONE-bench evaluates AI exploits in financial terms, providing a more tangible measure of risk. Smart contracts are particularly well-suited for this approach because vulnerabilities can directly translate into stolen funds, and simulations allow researchers to quantify the potential losses.\nOver all 405 contracts in SCONE-bench, 10 AI models produced exploits for 207 contracts, totaling $550.1 million in simulated stolen funds. Even accounting for potential data contamination, frontier models consistently demonstrated the ability to exploit contracts beyond their knowledge cutoff dates.\nConcrete Examples of AI Exploits\nOne tested vulnerability involved a token calculator function on an Ethereum-compatible contract that was mistakenly left writable. The AI agent repeatedly called the function to inflate its token balance, generating simulated profits of $2,500 and, under peak liquidity conditions, a potential $19,000. Independent white-hat intervention later recovered the assets.\nThe research underscores that AI agents are now approaching human-level capability in tasks like control-flow reasoning, boundary analysis, and exploiting software vulnerabilities—a skill set directly applicable to blockchain and traditional software systems alike.\nThe study emphasizes that AI cyber capabilities are accelerating rapidly, from network intrusions to autonomous exploitation of blockchain applications. SCONE-bench provides a defensive tool, allowing smart contract developers to stress-test systems before deployment.\nAccording to the researchers, the findings are a proof-of-concept that profitable, real-world autonomous exploitation is feasible, highlighting the urgent need for proactive AI-powered defenses to protect financial systems and digital assets.","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"-2","news_tag":"policyRegulatory","news_rank":0,"symbols":[],"gpt_button":0,"need_auth":false,"code":"91000000","status":"200"}}}