|
gm Bankless Nation,
Anthropic's too-scary-to-release model is allegedly cracking software left and right, but what does that mean for the future of DeFi? Today's Issue ⬇️
- ☀️ Need to Know: World Liberty's Big Borrow
The Trump-backed project's "FUD" defense.
- 🗣️ Analysis: DeFi's AGI Risk
How Mythos shakes up the risk profile.
Sponsor: MegaETH — Crypto has new apps, finally.
. . .
NEED TO KNOW
World Liberty's Big Borrow
- 💸 World Liberty Financial Defends Immense Borrow Position. Donald Trump’s family-backed crypto project is siphoning tens of millions from lenders and dismissing any pushback as FUD.
- 🟠 David Bailey's Nakamoto Contemplates Reverse Split Amid Delisting Deadline. The embattled DATco is considering emergency measures to remain compliant with Nasdaq's listing requirements.
- 🌺 Hong Kong Monetary Authority Grants First Batch of Stablecoin Licenses. The Asian city's central bank has awarded its first licenses to HSBC and a Standard Chartered-backed joint venture.
📸
Daily Market Snapshot: While U.S. stocks had mixed results on Friday, BTC, ETH, and the majority of the top 100 coins were trading in the green on the day and on the week.
| Prices as of 2pm ET |
24hr |
7d |
 |
Crypto $2.47T |
↗ 1.7% |
↗ 7.4% |
 |
BTC $73,006 |
↗ 1.0% |
↗ 9.3% |
 |
ETH $2,248 |
↗ 1.2% |
↗ 9.7% |
. . .
ANALYSIS
Can DeFi Survive Mythos?
It's funny. Institutions are finally arriving onchain, and the thesis that decentralized lending becomes the default primitive for financial applications has never been more credible. And yet, plenty of crypto-natives are shrinking from DeFi or pulling out altogether. The risk factor continues to outpace the reward, and the events of the past ten days have only made it worse. Mythical ThreatsAs most know by now, on April 1, attackers drained roughly $285 million from Drift Protocol, a Solana-based perps exchange, in about ten minutes. Security firms attributed the attack with medium-to-high confidence to UNC4736, a North Korean state-sponsored hacking group. The group didn’t execute a flash loan exploit or an oracle manipulation. It’s suspected they conducted a six-month intelligence campaign, embedding operatives, depositing $1 million of their own capital, before gaining privileged access to Drift's internal systems. Though this isn’t the first North Korean-led attack, it represents a new level of social engineering.
Then, on Tuesday, Anthropic disclosed Mythos Preview, its most powerful AI model to date. Mythos can autonomously discover and exploit zero-day vulnerabilities in real software and claims to have already found thousands of high-severity bugs across every major operating system and browser, including a decades-old flaws that survived millions of automated tests. These capabilities emerged from improvements in general reasoning and coding. Anthropic did not train it for hacking. Anthropic says that given these abilities, it will not be publicly releasing this model out of the gate; Anthropic is sharing it only with select partners through a program called Project Glasswing so they can patch vulnerabilities before attackers use them.
The implication for DeFi is direct. The cost of finding exploitable vulnerabilities in smart contracts and protocol infrastructure is about to collapse: it cost Mythos $50 to find the 27-year-old issue. Last December, Anthropic published a report showing that leading models could already crack over 55% of real smart contract exploits from scratch, up from 2% one year prior. Mythos operates at a different scale entirely. When exploit discovery gets this cheap, the economics of attacking DeFi protocols shift in ways we’ve never had to account for.
Risk Mispricing$11.8 billion sits in Morpho vaults today. Much of that capital arrived through Coinbase, Kraken, or similar interfaces, and the depositors earning modest 2-4% APY likely may be thinking of these as a type of savings account, but these are far from risk-free. In vaults, like those on Morpho, capital gets deployed across multiple pools and protocols by a third-party curator who determines which assets are permitted, how much leverage is acceptable, when to rebalance, when to exit, etc. The quality of the curator's judgment is what separates a well-run vault from catastrophe.
Given the complexity of these strategies, even well-managed vaults expose depositors to more risk than a traditional lending pool. M0 founder Luca Prosperi, who publishes the Dirt Roads newsletter, used the same models banks use to price corporate bonds to test whether depositors are being fairly compensated for these risks. He concluded that, for lending markets backed by ETH or BTC, lenders should earn 2.5% to 4% per year above a US Treasury. Major Morpho markets pay a fraction of that. Layer on nation-state espionage and superpowered AI vulnerability discovery as additional risk vectors, and the juice stops being worth the squeeze.
Can Insurance Help?Onchain insurance has existed for years. The first and longest-standing protocol, Nexus Mutual, launched in 2019. As of late 2022, less than 1% of DeFi's TVL is covered by insurance protocols while, as of 2026, Nexus Mutual has only paid out $18.6M in total claims across its entire history. Crypto lost $3.4B to hacks in 2025 alone.
Why? Here are the three main reasons:
- Premiums of 2-5% annually eat into or exceed the yield users are earning, so depositors skip it.
- Coverage is narrow. Nexus Mutual covers smart contract bugs and oracle failures, but not phishing, operational compromises, or team malfeasance – increasingly dominant attack vectors. Last year's $1.5B Bybit hack wouldn't have been covered. Neither would Drift's.
- And there's a data problem. Traditional insurers have centuries of loss history to price against. DeFi has about ten years. Protocols change with every upgrade, and there's no standardized way to measure how likely a given smart contract is to fail.
Yet, in the past week there's been a new iteration on insurance. OpenCover, a distribution layer built on top of Nexus Mutual, just introduced a product called Covered Vaults, designed around these failures and built specifically for vaults.
The mechanics are straightforward – deposit into a vault as you normally would, receive the token representing your share, then stake that token with Covered Vaults to activate protection. A small insurance premium is automatically deducted from your yield. You don't pay it separately or upfront; it streams from what the vault earns for you. If a covered loss event occurs, a hack or protocol failure, you're made whole up to the coverage limit. Toggle it off whenever you want. There are no lockups, no renewals. Current capacity is $50M per vault. That's real, but small relative to the billions deployed. And the threat vectors described above, nation-state operations and AI-powered vulnerability discovery, push against the boundaries of what any model built on historical loss data can confidently price.
The Uncomfortable MathThe sad reality of DeFi right now is that the depositor earning 2-4% on a vault position is taking quantifiable risk that dwarfs the yield – and this was true before we learned about the Drift attack or the Mythos Preview potential. The question is how do we proceed given the growing existential threats. The first is getting Mythos-class models into the hands of defenders. There's no excuse for leading AI firms to leave crypto companies out of the loop in early previews when the attack surface is so tantalizing to cyber criminals and nation state attackers. Building on that, the silver lining here is symmetry. It’s more likely this issue of security will be a cat-and-mouse game of attack and defense abilities chasing each other. Coupling this with insurance protocols like OpenCover, which I’m optimistic about, could provide DeFi a legitimate safety net which helps us scale and become a more battle-hardened decentralized financial foundation.
FRIEND & SPONSOR: MEGAETH
We're past "in it for the tech" or "in it for the money." MegaETH is bringing you products worth using, powered by USDM.
|
