Unchained
Unchained

How AI Agents Hacked Smart Contracts for $1 Apiece - DEX in the City - Ep. 975

Sponsor: UniswapCitadel has sparked uproar with a letter calling on the SEC to regulate DeFi protocols as exchanges. But the company's requests may not be totally unreasonable. In this episode of DEX in the City, hosts Jessi Brooks, Katherine Kirkpatrick Bos, and Vy Le dig into Citadel's c

Topics Discussed

Episode Summary

Executive Summary: The episode centers on three major themes: Citadel Securities’ comment letter on tokenized equities and DeFi, new CFTC actions opening spot crypto and tokenized collateral pathways, and Anthropic’s findings that AI agents can autonomously discover and exploit smart contract vulnerabilities. The hosts argue crypto must engage seriously with regulation, investor protection, and security while avoiding overbroad, anti-DeFi narratives.

Main Topics: Citadel Securities vs. DeFi market structure debate (Priority: 5/5): The hosts dissect Citadel’s SEC comment letter on tokenized equities and DeFi trading protocols, debating whether it is a legitimate call for fair, transparent markets or an incumbent attempt to preserve intermediary-based market structure. Regulatory clarity, technology neutrality, and investor protection (Priority: 5/5): They argue that asking for rulemaking, transparency, custody standards, and fair access is reasonable, but caution that crypto must prove on-chain markets can meet best-execution, surveillance, and integrity requirements. CFTC opens spot crypto on DCMs and expands tokenization pilot (Priority: 5/5): The episode highlights Caroline Pham’s announcements allowing listed spot crypto products on CFTC-registered futures exchanges and launching a pilot for tokenized collateral in derivatives markets. Bitnomial as an early mover in regulated crypto market structure (Priority: 4/5): The hosts explain why Bitnomial’s vertically integrated licensing made it well-positioned to launch leveraged spot crypto trading and why the move could encourage other DCMs to follow. Anthropic study on autonomous AI smart-contract attacks (Priority: 5/5): A major segment covers Anthropic’s research showing AI agents can independently recreate exploits, find zero-days in new contracts, and potentially scale hacking faster and cheaper than humans. Crypto security, developer risk, and post-2022 lessons (Priority: 4/5): The discussion ties the AI findings to broader concerns about smart-contract security, MEV, prompt injection, and the need for active rather than passive defenses in a post-2022 environment. Legal and humanitarian crypto updates (Priority: 3/5): The episode closes with a shout-out to the Samurai Wallet pardon petition and donations from crypto firms to Hong Kong fire relief, framing crypto’s human and civic side.

Key Arguments: Citadel’s letter is not outrageous from a traditional finance perspective because many of its concerns—fairness, transparency, best execution, custody, and surveillance—are real investor-protection issues. The letter is also self-interested: as a major intermediary, Citadel benefits from a market structure that preserves intermediaries and limits DeFi disintermediation. Crypto should not dismiss all regulation; it should advocate for narrow, technically accurate rules and explain why some decentralized actors should not be treated like intermediaries. If on-chain capital markets are to gain SEC approval, the industry must prove that trading is fair and transparent, not just faster and cheaper. The CFTC’s spot crypto and tokenized collateral initiatives are meaningful because they show regulated crypto market structure can work within federal oversight rather than a state-by-state patchwork. Bitnomial’s launch suggests vertically integrated, CFTC-licensed firms may be the first to operationalize this new regime, but others can follow. Anthropic’s study shows AI agents can move from assisting attacks to executing complete exploit chains autonomously, reducing the cost and time needed to attack smart contracts. Crypto security must become more active and proactive, because attackers can now scan and exploit at scale with agentic tooling. The Samurai Wallet plea deal illustrates how prosecutorial leverage and judge assignment can dramatically shape outcomes for crypto developers. Crypto firms’ disaster relief donations demonstrate that the industry can act as a positive global citizen beyond market and policy battles.

Data Points: SEC/Comment letter context: 1 comment letter - Citadel Securities submitted a comment letter to the SEC on tokenized equities and DeFi trading protocols. Regulatory licenses held by Bitnomial: 3 licenses - Bitnomial was described as holding a DCM, DCO, and FCM license. Crypto market structure count: 4 pieces - The hosts outlined the four pieces of a derivatives market: exchange (DCM), clearinghouse (DCO), broker (FCM), and technology/matching engine. AI exploit cost per contract: About $1 - Anthropic’s agents reportedly tested smart contracts at roughly one dollar per contract. Scale of test: 1,000 smart contracts for $1,000 - The hosts explained the agents could test many contracts cheaply at scale. AI findings: 2 zero-day exploits - Anthropic’s agents found two zero-day exploits in brand-new contracts with no known issues. Potential hacking economics: Exploits earned more than agent cost - The agents generated money from exploits that exceeded the cost of running them. Criminal plea outcome: 5 years maximum charge - Samurai Wallet co-founder Keone Rodriguez pled to operating an unlicensed money transmitter business, the least serious charge. Original exposure in Samurai case: 25 years possible - The hosts noted the alternative trial exposure included money laundering counts and a much higher potential sentence. Hong Kong fire donations: $16 million - Crypto companies reportedly donated millions, with one figure cited as 16 million, to support Hong Kong fire relief. Crypto industry time frame: 2022 crash - The hosts referenced the 2022 crypto crash and the demonization of DeFi during that period. Settlement comparison: T+1 - The tokenized collateral discussion referenced the move to faster settlement, comparing it to historical shifts like T+1.

Pivotal Quotes: "the SEC is never going to allow capital markets to come on chain unless we can prove that they're fair and transparent" — V: Argument that on-chain markets must demonstrate investor protection and integrity to gain regulatory acceptance. "it's not DeFi that screwed this up, guys. It's actually CeFi masquerading as DeFi" — KK: Reaction to the 2022 crash and the belief that centralized failures were wrongly blamed on DeFi. "the agents found two zero-day exploits" — Jesse: Summary of Anthropic’s finding that AI agents independently discovered vulnerabilities in new smart contracts.

Implications: Crypto’s next phase will be shaped by whether it can prove market fairness, security, and regulatory compatibility. The episode suggests a future of narrower, tech-aware regulation, more CFTC-led experimentation, and greater urgency around smart-contract and AI-driven threat models.

🔓 Sign Up for Unlimited Episode Search

About Unchained

View all episodes from Unchained