New artificial intelligence (AI) models have shifted the cybersecurity playing field in favor of attackers, causing a “vulnerability apocalypse” that led to the resurgence in decentralized finance (DeFi) hacks, according to Mitchell Amador, the CEO of bug bounty platform Immunefi.

The proliferation of new AI models, such as Claude Opus 4.8 and ChatGPT 5.5, is the main reason that led to the resurgence in crypto hacks in 2026, Amador told Cointelegraph at the recent WAIB Summit in Monaco.

Hacking activity across the industry surged in April 2026, with illicit actors stealing more than $634 million from cryptocurrency platforms, the highest monthly total since the Bybit hack helped drive losses to roughly $1.4 billion in February 2025, according to DefiLlama data.

Total crypto hacks by monthly sum, all-time chart. Source: DefiLlama

Crypto needs to survive the next three to four years

The next three to four years will be a crucial survival period for the crypto industry, until cybersecurity teams harness the defensive capabilities of these same AI models to build “impregnable” codebases that attackers won’t be able to breach, said Amador.

This timeline could shrink to less than two years if the industry adopted more “crowdsourced security solutions” until cybersecurity researchers turn these AI models to their advantage, he added.

Amador’s comments followed the release of Anthropic’s latest Claude Mythos model, Fable 5, which sparked industry concerns over its potential ability to accelerate cryptocurrency exploits.

Anthropic said on Tuesday that Fable 5 has safeguards that reroute topics such as cybersecurity to a different model, Claude Opus 4.8.

Related: Recovery hopes fade as Kelp DAO hacker launders nearly all $220M in stolen funds

The industry has become increasingly sensitive to security risks after a string of major DeFi exploits renewed concerns about protocol vulnerabilities.

On April 19, an attacker drained about 116,500 restaked Ether (rsETH), worth roughly $290 million to $293 million at the time, from Kelp DAO’s LayerZero-powered rsETH bridge.

LayerZero said Kelp DAO’s 1/1 decentralized verifier network (DVN) setup created a single point of failure by relying on a single verifier path for cross-chain messages. LayerZero said it had previously advised against that configuration.

Magazine: The legal battle over who can claim DeFi’s stolen millions 

The US government has transferred nearly $984,000 in cryptocurrency linked to Alameda Research and FTX.

• The US transferred nearly $984K in seized FTX and Alameda-linked crypto.
• About $768K of the funds moved to Coinbase Prime, according to Arkham data.
• Arkham data shows US government crypto holdings total about $20.93B.

Blockchain data shows that most of the funds moved to Coinbase Prime as authorities continue managing seized assets. The transfers form part of ongoing efforts tied to the recovery and distribution process following the FTX collapse.

Coinbase Prime receives portion of seized FTX funds

Arkham Intelligence data showed movement from wallets connected to seized Alameda and FTX assets. The transfers totaled approximately $984,000 in cryptocurrency. Of that amount, about $768,000 moved to Coinbase Prime.

The transactions occurred as authorities continue overseeing digital assets recovered from the bankrupt exchange. The funds remain linked to broader bankruptcy and recovery proceedings. Current records point to the FTX Estate as the eventual destination of recovered assets.

Government agencies have gradually managed seized cryptocurrency through transfers and liquidation activity. These actions support efforts to return value to affected creditors. The latest movement represents a small portion of assets held under government control.

FTX recovery process continues through asset management

Authorities seized multiple cryptocurrency holdings connected to Alameda Research and FTX after the exchange collapsed. Since then, officials have managed those assets through established recovery procedures. The process includes custody, transfers, and liquidation when required.

The FTX Estate continues working to recover and distribute value to creditors. Recovered assets form a key part of that effort. Government-managed transfers help move seized holdings through the recovery framework.

Blockchain monitoring platforms continue tracking wallet activity connected to seized assets. Arkham Intelligence reported the latest transactions through publicly visible blockchain records. The transfers added another step in the long-running FTX recovery process.

Bitcoin remains the largest asset in government crypto holdings

According to Arkham data, the US government currently controls a cryptocurrency portfolio worth about $20.93 billion. Bitcoin accounts for the majority of those holdings. Government wallets hold approximately 328,354 BTC valued at around $20.57 billion.

The portfolio also includes roughly 62,437 ETH worth more than $103 million. Other holdings include USDT, WBNB, BNB, WBTC, and additional digital assets. These assets originate from separate enforcement actions and seizures.

Although the recent $984,000 transfer represents a small fraction of total holdings, it remains part of active asset management. Government agencies continue processing seized cryptocurrency tied to major enforcement cases. The latest movement highlights ongoing efforts connected to the FTX and Alameda recovery proceedings.

TLDR

• Federal prosecutors charged two suspects in a $389M crypto money laundering case.
• Authorities linked the operation to AudiA6, a bitcoin mixing and cybercrime forum network.
• The group allegedly processed over 10,000 BTC and earned millions in fees.
• Investigators traced funds connected to darknet markets and ransomware activity.
• International agencies conducted coordinated arrests and seized digital infrastructure.

Federal prosecutors in Philadelphia charged two men in a $389 million crypto laundering case. Authorities linked the operation to a global network using bitcoin mixing services and darknet platforms. Officials said arrests occurred in Georgia after a coordinated multinational enforcement action.

Crypto Money Laundering Charges Linked to AudiA6 Network

Ruslan Tkachuk and Alexander Ledenev face conspiracy charges tied to a crypto money laundering scheme. They allegedly operated a service processing large bitcoin flows across multiple wallets globally coordinated.

Prosecutors said AudiA6 handled about 10,333 Bitcoin worth $389.7 million. The group earned over $10 million through transaction fees up to 5% and the platform network-wide.

Authorities traced about 393 Bitcoin linked to darknet markets and ransomware groups, investigators confirmed. They said additional funds entered indirectly through criminal networks.

Officials said undercover agents conducted six operations between 2022 and 2026. Agents posed as criminals seeking laundering services for illicit proceeds operations.

In one exchange, operators accepted stolen bitcoin without restrictions, prosecutors said. In another, they instructed that all funds must pass through mixers transactions.

Prosecutors said blockchain analysis exposed traceable flows through exchange records systems. They said marketing claims of full anonymity did not match transaction trail activity.

Charges include conspiracy to launder monetary instruments and money laundering offenses charges filed. Each count carries a maximum sentence of 20 years in prison.

Dark2Web Forum and International Arrest Operation

AudiA6 operated Dark2Web, a forum used for cybercrime coordination and payments in an online marketplace. Users negotiated illicit services, including scams and narcotics-related transactions.

Authorities said the platform functioned alongside a bitcoin mixing infrastructure framework layer. It supported transactions designed to obscure fund origins across wallets.

FBI and Secret Service agents conducted undercover exchanges over several months. They engaged operators posing as criminals seeking laundering services investigations period.

Operators responded with statements supporting unrestricted laundering of illegal funds for illicit activity. One operator said “don’t care” when asked about stolen Bitcoin sources.

A coordinated operation involved Europol and multiple international law enforcement agencies across the operation. Searches targeted properties, digital devices, and cryptocurrency-linked accounts.

Authorities froze assets, seized devices, and replaced websites with seizure banners. They also blocked Telegram channels linked to the AudiA6 network channels.

U.S. officials plan extradition proceedings for both suspects from Georgia. The Eastern District of Pennsylvania continues prosecution led by federal attorneys.

A bipartisan proposal in the U.S. House aims to consolidate criminal investigations into cryptocurrency theft, scams, and other digital asset-related crimes under a Department of Justice-led task force. The legislation envisions the DOJ as the principal federal coordinator, uniting the FBI, Homeland Security Investigations, and Treasury’s Financial Crimes Enforcement Network (FinCEN) to streamline evidence collection, blockchain forensics, asset tracing, and victim support across federal, state, and local law enforcement. According to Cointelegraph, the measure would also enable training and technical assistance for state and local agencies, with the task force coordinating international law enforcement collaboration on cross-border investigations and delivering annual threat assessments to Congress.

The proposal explicitly states that it would not authorize new regulation of cryptocurrency markets, would not expand the authority of federal agencies, and would not create new criminal offenses. Rather, its focus is on interagency coordination within the enforcement framework already responsible for financial crimes. The bill names Republican Representative Lance Gooden and Democratic Representative Josh Gottheimer as its sponsors. The text and accompanying materials have been referenced in reporting, including a link to the draft bill hosted by Gooden’s office.

The initiative also comes amid rising crypto-related losses and an expanding role for technology in investigations. The FBI’s 2025 Internet Crime Report highlighted that Americans reported more than $11 billion in crypto-related losses last year. In parallel, the crypto-analytic community is increasingly leveraging artificial intelligence to support casework.

The task force would engage with international counterparts on cross-border cases and would produce annual reports outlining emerging threats, enforcement challenges, and potential policy recommendations for Congress. The bill’s architects frame the measure as a coordination enhancement rather than a regulatory expansion, aimed at closing gaps in investigative workflows and ensuring consistency in evidence handling across jurisdictions.

The broader policy conversation surrounding this proposal sits alongside a growing emphasis on advanced analytics in crypto investigations. Industry players have rolled out AI-enabled tools designed to trace fund flows, audit transaction graphs, and support investigative decision-making. For example, TRM Labs recently introduced an AI-driven investigative assistant designed to aid crypto compliance and investigations, while Chainalysis announced a later rollout of similar AI-enabled agents for investigations and compliance. These developments reflect a trend toward more scalable forensics as criminals increasingly automate cross-chain activity. Regulatory and financial institutions will be watching closely how such tools intersect with AML/KYC regimes and cross-border enforcement norms.

Crypto-asset exploits continue to drive losses, underscoring the practical significance of enhanced investigative capacity. DeFiLlama data cited a monthly loss total of roughly $630 million in April, marking one of the largest monthly totals in recent months and reinforcing the argument for stronger, more coordinated enforcement and forensics capabilities. Related reporting indicates a broader push toward integrated law enforcement tools and international cooperation in tackling crypto crime.

Key takeaways

• A bipartisan bill would establish a Department of Justice–led task force to coordinate cryptocurrency crime investigations across federal, state, and local agencies, with a focus on best practices and evidence standardization.
• The initiative emphasizes cross-agency collaboration, blockchain forensics, asset tracing, victim support, and training, including international cooperation on cross-border cases.
• Importantly, the bill explicitly prevents new market regulation, expansion of federal authority, or creation of new criminal offenses; the aim is enhanced coordination within existing enforcement powers.
• AI-enabled analytics and blockchain-investigation tools are increasingly central to crypto crime workflows, shaping how investigators trace flows and identify illicit networks.

Legislative framework and enforcement architecture

According to Cointelegraph, the proposal would position the DOJ as the central federal coordinator for cryptocurrency-crime investigations, consolidating activities among the FBI, Homeland Security Investigations, and FinCEN’s enforcement arm. The task force would develop and disseminate best practices for evidence collection, blockchain forensics, asset tracing, and victim support, while providing training and technical assistance to state and local law enforcement agencies. The legislation envisions annual reporting to Congress on emerging threats and enforcement challenges, and it calls for collaboration with international law-enforcement partners to advance cross-border investigations. The sponsors emphasize that the measure is a coordination mechanism rather than a vehicle to regulate markets or expand federal power.

For compliance and oversight teams, the architecture signals a potential shift toward standardized investigation workflows and shared standards for digital-asset evidence. As authorities align practices across jurisdictions, exchanges, custodians, and banks could face more uniform expectations for information sharing and cooperation in criminal investigations.

Technology and investigative capabilities

The bill arrives at a moment when private-sector blockchain intelligence firms are integrating AI into investigative workstreams. In early 2025, TRM Labs announced an AI-assisted investigative assistant designed to trace flows, audit transaction graphs, and propose next steps from natural-language prompts, reflecting a broader industry trend toward scalable forensics. Chainalysis subsequently indicated that its own AI-enabled agents would roll out to support investigations and compliance functions, underscoring a parallel shift toward automated, data-driven intelligence in crypto-crime response. The integration of AI tools—while increasing efficiency—also raises considerations for accuracy, bias, and governance within enforcement workflows.

These tools are increasingly central to how investigators identify illicit activity, parse complex transaction networks, and reconstruct schemes that span multiple chains and jurisdictions. As enforcement bodies scale with these capabilities, firms operating in the crypto ecosystem should anticipate evolving expectations around data transparency, reporting, and collaboration with law enforcement under applicable AML/KYC regimes and cross-border frameworks.

Regulatory policy and market implications

The proposed framework represents a structural approach to enforcement coordination rather than a new regulatory regime. By clarifying roles and standardizing practices across agencies, the bill could influence how exchanges, banks, and institutional investors approach risk management and regulatory compliance. In the broader policy landscape, the development complements ongoing regulatory oversight at the federal level while existing frameworks for monitoring and supervising crypto markets remain distinct from the substance of this enforcement-oriented initiative. Observers will be attentive to how annual congressional reporting shapes understanding of threats and informs any future policy considerations.

Overall, the measure highlights a continued convergence between legislative intent and technological tools in the fight against crypto crime. As cross-border investigations intensify and illicit actors increasingly leverage automation, coordinated, well-governed enforcement mechanisms will be critical to maintaining resiliency in the digital-asset ecosystem.

Closing perspective: If advanced oversight and interagency coordination proceed, the sector should monitor the pace of funding, the scope of interagency collaboration, and the cadence of annual threat assessments—factors that will shape enforcement posture and compliance expectations in the months ahead.