Vitalik Buterin Says AI Could Strengthen Crypto Security, Keeps About 90% of Wealth in Crypto
Key Takeaways
- •Vitalik Buterin rejected the view that increasingly capable AI will make cybersecurity untenable, contending that security naturally favors defenders.
- •Buterin holds roughly 90% of his personal net worth in cryptocurrency, framing the position as a personal bet on the security of digital systems.
- •He favors AI-assisted formal verification, which mathematically proves software meets precise security specifications, over relying on security researchers to find vulnerabilities before attackers do.
- •Formal verification is currently applied mainly to a small set of critical components because constructing proofs is demanding, and defining a complete security requirement is itself difficult, as proving one property does not rule out forgery, replay, denial-of-service or dependency-related failures.
- •Buterin argued that crypto networks need verification of supporting software such as databases, networking layers, caches and libraries, and suggested modern AI could make validating larger portions of complete programs faster and more feasible.
Vitalik Buterin, one of Ethereum’s founders, has rejected the view that increasingly capable artificial intelligence will make cybersecurity untenable. He argued that stronger mathematical verification could make critical software more difficult to exploit and could ultimately give defenders an advantage. The question carries particular weight in crypto, where software defects can put user funds directly at risk, and Buterin is answering it with more than an argument.
“It’s an increasingly common take that AI hacking means cybersecurity is doomed. I disagree. I think cybersecurity is naturally defense-favoring once people get their shit together. And anyone who continues to hold cryptocurrency (including me, ~90% of my net worth) is implicitly…” — vitalik.eth (@VitalikButerin), September 16, 2026
https://x.com/VitalikButerin/status/2100337594722890145?ref_src=twsrc%5Etfw
Buterin’s Crypto Holdings Reflect a Security Bet
Buterin described his continued exposure to cryptocurrency as a bet on the security of digital systems. He said that approximately 90% of his personal net worth is held in crypto, meaning his position is also a personal wager against efforts to compromise those systems. In a field where flaws in deployed code can translate directly into losses for users, the framing ties his own balance sheet to the security claim he is making.
He said he is not relying solely on defenders finding vulnerabilities before attackers do. Instead, he pointed to a gradual shift toward demonstrating that software complies with clearly defined security rules. The approach is especially relevant to blockchain systems, where code typically runs in public and a software defect can affect wallets, smart contracts, bridges, validators or entire networks.
Buterin cited advanced mathematical theorem proving as an area where AI could eventually contribute. In his view, AI tools capable of addressing highly difficult mathematical problems could also help resolve a formal security specification a software system.
Formal Verification and Crypto Security
Formal verification differs from conventional code testing because it seeks to prove that defined properties hold, rather than simply searching for failures under selected conditions. Conventional security testing can involve audits, simulations and attempts to find bugs through attack searches. Formal verification begins by stating the precise requirement a system must guarantee and then conducting a mathematical check to determine whether the system satisfies it.
In practice, the effort involved in constructing such proofs has meant the technique is applied mainly to a small set of components judged critical, leaving most software covered only by conventional testing. Buterin noted that defining the security requirement itself is difficult. A protocol might prevent unauthorized access while remaining vulnerable to forgery, replay attacks, denial-of-service attacks or failures involving a dependent component. Proving one property therefore does not necessarily establish that the full system is secure.
Ethereum Requires Broader System Verification
Verifying only a small number of components considered critical may not be enough for crypto networks. Supporting software—including databases, networking layers, caches and libraries—can also form part of the attack surface.
Buterin suggested that modern AI could make it possible to validate a larger portion of a complete program more quickly. That could reduce reliance on the assumption that security researchers will identify every exploitable vulnerability before attackers discover them.
AI-Enabled Attacks and Defenses
The capabilities of AI systems accessing real-world third-party systems during security assessments have also raised concerns. Anthropic has observed instances illustrating the severity of that development, according to the source. The result is an accelerating contest between automated attacks and automated defenses.
Buterin’s proposed response for Ethereum is not simply to deploy more AI-powered vulnerability scanners. He favors writing software with precise security properties that can increasingly be proven by machines.
That approach could alter the balance in cryptocurrency security. Rather than allowing attackers to gain an advantage from AI-assisted methods, more extensive machine-checkable verification could strengthen the position of defenders. Buterin’s broader argument is that AI-assisted formal verification may be important not only for Ethereum, but also for privacy technologies and cryptography. Whether machine-assisted proving can scale from verifying isolated properties to covering complete systems is the pivot on which his defense-favoring case turns, and it is the development most worth watching as the argument plays out.
