Connect with us
DAPA Banner

Crypto World

Moonwell hit by $1.78M exploit as AI coding debate reaches DeFi

Published

on

Crypto Breaking News

Moonwell, a decentralized finance (DeFi) lending protocol active on the Base and Optimism ecosystems, was the target of a calculated exploit that netted attackers roughly $1.78 million. The root cause centered on a pricing oracle for Coinbase Wrapped Staked ETH (cbETH) that returned an anomalously low value—about $1.12 instead of the correct price near $2,200—creating a mispricing that savvy actors could abuse to secure profits. The incident underscores the fragility of cross-chain DeFi infrastructure when price feeds are misfired and automated systems latch onto erroneous data. It also casts a spotlight on the role of AI-assisted development in smart-contract security, a topic that has become increasingly controversial as teams lean on AI-driven tools to accelerate coding and audits.

The story links a technical mispricing to governance and engineering questions that go beyond a single exploit. In the wake of the incident, Moonwell’s development activity drew scrutiny after security researcher Leonid Pashov flagged concerns on social media about AI-assisted contributions in the underlying codebase. The pull requests associated with the affected contracts show multiple commits co-authored by Claude Opus 4.6, a reference to Anthropic’s AI tooling, prompting Pashov to publicly characterize the case as an example of AI-written or AI-assisted Solidity code backfiring. The discussion is not merely about AI; it centers on whether automated code authorship was coupled with adequate safeguards.

In speaking with Cointelegraph, Pashov described how the discovery unfolded: the team had linked the case to Claude because several commits in the pull requests were attributed to Claude’s AI-assisted workflow, suggesting the developer used AI to write portions of the code. The broader implication, he argued, is not that AI itself is inherently flawed but that the process failed to implement rigorous checks and end-to-end validation. This distinction matters because it frames the incident as a cautionary tale about governance, audit discipline, and testing rigor—factors that should govern any DeFi project experimenting with AI-enabled development workflows.

Vulnerable code led to Moonwell exploit. Source: Pashov

Initial comments from Moonwell’s team suggested there had not been extensive testing or auditing at the outset. Later, the team asserted that unit and integration tests existed in a separate pull request and that an audit had been commissioned from Halborn. Pashov’s assessment remained that the mispricing might have been detected with a sufficiently rigorous integration test that bridged on-chain and off-chain logic, though he declined to single out any audit firm for blame. The debate touched on whether AI-generated or AI-assisted code should be treated as untrusted input, subject to stringent governance processes, version control, and multi-person review, particularly in high-risk areas such as access controls, oracle interaction, pricing logic, and upgrade pathways.

Advertisement

Beyond the technical particulars, the Moonwell incident has sharpened the broader conversation about AI’s role in the crypto development cycle. Fraser Edwards, co-founder and CEO of cheqd, a decentralized identity infrastructure provider, argued that the discourse on “vibe coding” masks two distinct realities in AI usage. On one hand, non-technical founders may lean on AI to draft code they cannot review; on the other, seasoned developers can leverage AI to accelerate refactors, explore patterns, and test ideas within a mature engineering discipline. Edwards stressed that AI-assisted development can be valuable at the MVP stage but should never substitute for production-ready infrastructure in capital-intensive environments like DeFi.

Edwards urged that any AI-generated smart-contract code be treated as untrusted input, requiring robust version control, clearly defined ownership, multi-person peer review, and advanced testing—especially for modules governing access controls, oracles, pricing logic, and upgrade mechanisms. He added that responsible AI integration ultimately hinges on governance and discipline, with explicit review gates and separation between code generation and validation. The goal is to ensure that deployments in adversarial environments carry latent risk that must be proactively mitigated.

Small loss, big governance questions

The Moonwell incident sits in a broader context where DeFi’s risk appetite meets evolving development practices. While the dollar figure of this exploit pales next to some of DeFi’s most infamous breaches—such as the March 2022 Ronin bridge hack that yielded more than $600 million—the episode exposes how governance decisions, testing rigor, and tooling choices can shape outcomes in real-time. The combination of AI-assisted edits, a pricing oracle misconfiguration, and an already audited codebase raises a pointed question: how should projects balance speed, innovation, and safety when AI is part of the development workflow? The lessons extend to any protocol that relies on external price feeds and complex upgrade paths, especially when those upgrades touch collateralization and liquidity risk.

As the industry weighs these factors, the Moonwell episode serves as a practical stress test for security models that attempt to scale AI-enabled development without compromising essential safeguards. It highlights that even with audits and tests in place, an end-to-end validation that encompasses on-chain and off-chain interactions remains essential. The tension between rapid iteration and exhaustive verification is unlikely to abate, particularly as more protocols explore AI-powered tooling to maintain pace with innovation while maintaining security.

Advertisement

“Vibe coding” vs disciplined AI use

The discourse around AI-assisted coding in crypto has shifted from a binary critique of AI vs. human developers to a nuanced debate about process. Edwards’s reflections underscore that AI can be a productive aid when integrated within a disciplined framework that emphasizes guardrails, ownership, and rigorous testing. The Moonwell case reinforces the notion that AI-generated code still requires the same level of scrutiny as hand-written code, if not more, given the elevated stakes in DeFi.

In practical terms, the incident invites a reevaluation of how AI-assisted workflows are governed within smart contract teams: who owns the AI-generated output, how changes are reviewed, and how automated tests map to real-world scenarios on the blockchain. The central takeaway is not to demonize the technology but to ensure that governance channels, audit pipelines, and on-chain validation remain robust enough to catch misconfigurations and mispricings before capital is at risk.

What to watch next

  • Moonwell outlines remediation steps and governance changes in the wake of the exploit, including any changes to oracle integration and upgrade pathways.
  • Auditors and the Moonwell team publish a detailed post-mortem and a revised testing framework that explicitly ties on-chain scenarios to unit and integration tests.
  • Additional independent audits focus on AI-assisted development workflows and their impact on critical smart-contract components.
  • On-chain monitoring and alerting enhancements are implemented to detect pricing anomalies in real-time and to trigger protective measures such as circuit breakers or pause mechanisms.

Sources & verification

  • Moonwell contracts v2 pull request that exposed the mispricing issue: https://github.com/moonwell-fi/moonwell-contracts-v2/pull/578
  • Public discussion by security researcher Pashov referencing AI-assisted commits in Moonwell: https://x.com/pashov/status/2023872510077616223
  • Context on DeFi exploits and governance implications (Ronin bridge, Nomad bridge, etc.) referenced in related coverage: https://cointelegraph.com/news/battle-hardened-ronin-bridge-to-axie-reopens-following-600m-hack and https://cointelegraph.com/news/suspect-behind-190-million-nomad-bridge-hack-extradited-us
  • Related AI in crypto governance discussions and examinations of AI-assisted development practices cited in industry discussions

AI-assisted coding, mispricing and governance in Moonwell: what it means for DeFi

Moonwell’s experience illustrates a practical tension at the intersection of AI-enabled tooling and DeFi security. An exploitable mispricing in a cbETH price feed demonstrates that even modest numeric errors in oracles can cascade into material losses when strategy and funding flows are levered through a lending protocol. The broader lesson is clear: AI-assisted development can accelerate iteration, but it does not eliminate the need for rigorous end-to-end validations that simulate real-world blockchain interactions.

In the immediate term, the incident should prompt protocol teams to revisit governance structures around codegeneration, review ownership, and the balance between automated tooling and human oversight. It also emphasizes the importance of robust integration tests that connect on-chain state changes with external data feeds, ensuring that a mispricing cannot be exploited in ways that bypass risk controls. As other projects experiment with AI-assisted workflows, Moonwell’s case will likely serve as a reference point for how to align speed with security and who bears responsibility when AI-assisted code contributes to a vulnerability.

Risk & affiliate notice: Crypto assets are volatile and capital is at risk. This article may contain affiliate links. Read full disclosure

Advertisement

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Coinbase’s x402 Payment Protocol Moves to Linux Foundation With Backing From Google, Stripe, and Visa

Published

on

Coinbase's x402 Payment Protocol Moves to Linux Foundation With Backing From Google, Stripe, and Visa

The open standard for embedding payments into HTTP interactions aims to become the settlement layer for AI agent commerce, with over 20 founding members spanning tech, payments and crypto.

The x402 protocol, Coinbase’s open standard for embedding stablecoin payments directly into web interactions, has officially moved to the Linux Foundation as the newly launched x402 Foundation opens its doors with a broad coalition of industry heavyweights.

The announcement, made Thursday at the MCP Dev Summit North America, marks the protocol’s transition from a Coinbase-led project to a vendor-neutral, community-governed standard designed to accelerate adoption as AI agents increasingly need to pay for services autonomously.

The foundation’s initial governing body includes Cloudflare and Stripe, and founding members include Adyen, Amazon Web Services, American Express, Ampersend.ai, Ant International, Base, Circle, Fiserv Merchant Solutions, Google, KakaoPay, Mastercard, Merit Systems, Microsoft, Polygon Labs, PPRO, Sierra, Shopify, Solana Foundation, Thirdweb and Visa.

Advertisement

From HTTP Error Code to Payment Layer

The x402 protocol revives HTTP’s long-dormant “402 Payment Required” status code, turning it into a functional payment handshake. When an AI agent requests a paid resource, the server responds with a 402 status containing machine-readable price and settlement details. The client signs a payment payload and retries the request, and a facilitator verifies and settles the transaction on-chain.

The design supports both fiat and crypto payment methods across multiple blockchains.

The launch comes as the race to build the internet’s AI payment layer intensifies. x402 faces competition from the Machine Payments Protocol, developed by Stripe and Paradigm’s Tempo blockchain, which uses session-based authentication rather than x402’s per-request model.

Google has already integrated x402 into its Agentic Payments Protocol as the default stablecoin rail. The surrounding infrastructure is also expanding: MoonPay last week released the Open Wallet Standard for AI agent wallet interactions, Visa launched its CLI payment tool targeting agent commerce, and Circle built its Nanopayments directly on x402 for sub-cent USDC transactions.

Advertisement

Coinbase and Cloudflare first announced their intent to create the foundation in September 2025. By placing the protocol under the Linux Foundation’s governance, x402 aims to function as an AI commerce equivalent to SSL, the encryption standard that has become foundational to secure web browsing.

This article was written with the assistance of AI workflows. All our stories are curated, edited and fact-checked by a human.

Source link

Advertisement
Continue Reading

Crypto World

Bitcoin Bulls Must Clear $76K To Avoid New Lows In 2026

Published

on

Bitcoin Bulls Must Clear $76K To Avoid New Lows In 2026

Bitcoin’s (BTC) range-bound trading within the $60,000 to $73,000 range is impressive, especially when considering the macroeconomic backdrop of Brent crude oil rising to levels not seen since 2008, a hot war between the US, Israel and Iran, and a volatile stock market where the S&P 500 index trades at a 3.95% year-to-date loss. 

Despite these intensifying headwinds, Bitcoin buyers have shown a steady appetite for buying the price drops to $60,000, and while the level currently holds as support, the risk of lower prices is not zero.   

Bitcoin’s 1-day chart shows a bearish continuation pattern, with one pattern confirmed on Jan. 20 as BTC price entered a correction to $60,014, and a second bear flag currently in play. Every price rally to the flag’s overhead trendline has been rebuffed since Feb. 8, and technical analysis stresses the importance of a rally and multi-day candle close above $76,000 to negate the pattern. 

Ideally, a rally to $76,000 would hold through a 2- to 3-day consecutive-candle close, followed by a retest of the trendline at $75,000 to confirm a support-resistance flip, where a former resistance level is now confirmed as support. 

Advertisement

Analysis by chartered market technician Aksel Kibar predicts a potential price drop to $52,500. Referencing analysis from March 18, Kibar said that a,

“Breakdown of the lower boundary will be the signal for a possible move toward $52,500.”

Bearish Bitcoin rising wedge backs $52,500 price prediction. Source: Aksel Kibar / X

Related: Bitcoin traders forecast short-term downside even as BTC price chases $68K

Data from Velo highlights the relatively flat market demand across Bitcoin’s spot and futures markets. Although traders appear to view instances where BTC’s funding rate turns negative as a buying opportunity, their confidence is largely absent during rallies into the bear flag’s trendline resistance.

Evidence of this is seen in Bitcoin’s aggregated open interest remaining pinned below $20 billion, a level not seen since Feb. 2 when BTC traded near $79,000.

BTC/USDT 4-hour chart. Source: Velo

Regarding Kibar’s $52,500 price prediction and its alignment with Bitcoin’s futures markets, Hyblock liquidation heatmap data shows a large number of leveraged long positions at risk of liquidation if BTC falls into the $63,000 to $65,000 range.

Below this is a liquidity gap, and the next block of open margin long positions starts in the $57,500 to $56,000 range.

Advertisement
BTC/USDT liquidation heatmap, 1-month lookback. Source: Hyblock

The current price action essentially reflects a market that trades sideways and consolidates as traders search for capital flow or narrative-related factors that would push them into larger directional bets.

Until such a catalyst emerges, it’s likely that Bitcoin will continue to trade within its $10,000 range, with $60,000 as the lowest key support and $70,000 as the most challenging level of resistance.