GoPlus: AI is being used to exploit vulnerabilities in old contracts, and continuous AI auditing services are recommended for projects.

According to ChainCatcher, Web3 security company GoPlus Security has pointed out that there has been a surge in smart contract vulnerability attacks recently, especially targeting old contracts that have been deployed for many years, which have become a key focus for attackers who are leveraging AI technology to quickly detect and exploit these vulnerabilities.

Typical recent incidents include:

• On June 9, the Token of Power (TOP) contract, which was deployed 7 years ago, was attacked on Ethereum, resulting in a loss of approximately $1.5 million;
• On May 25, the WUSD.fi contract, deployed 3 years ago, was attacked, resulting in a loss of around $200,000;
• On June 14 and June 18, Aztec Network suffered two consecutive attacks due to old contracts deployed 2 years ago, with total losses exceeding $4 million.

GoPlus Security believes that traditional auditing methods are difficult to effectively cover legacy contracts, and that adopting AI-based continuous auditing (Always-on Audit) services may be the most effective solution at present, as they can perform security checks on old contracts in a short timeframe, achieving a balance between reliability and cost.