Solana co‑founder warns phishing and social engineering are crypto’s biggest threat
Anatoly Yakovenko says attackers exploiting human error, not AI or quantum computing, pose the greatest risk to digital assets and recommends multisig wallets and isolation devices.
Key takeaways
- Yakovenko argues that social engineering attacks outweigh technical threats like AI or quantum computers.
- He recommends using a dedicated iOS device with Lockdown Mode and multisignature wallets to protect assets.
- Recent incidents, including Binance’s $6.34 bn breach, illustrate how human‑targeted attacks compromise crypto security.
Solana co‑founder Anatoly Yakovenko told followers on X that the most serious danger facing the cryptocurrency ecosystem is not a breakthrough in artificial intelligence or quantum computing, but rather phishing and other social‑engineering schemes. The comment comes amid a wave of high‑profile attacks that have exploited human error to steal billions of dollars in digital assets.
SOL / USD
Why human‑focused attacks trump technical threats
According to U.Today, Yakovenko emphasized that attackers do not need to crack blockchain cryptography; they simply need to trick users into revealing private keys or credentials. He contrasted this with speculative fears about AI or quantum computers “breaking the math,” stating that such scenarios are far less immediate than the ongoing social‑engineering campaigns targeting investors and exchange staff.
Recent incidents illustrate the risk
The recent Binance breach, detailed in the same report, underscores Yakovenko’s point. On Oct. 29 the exchange lost an estimated $6.34 bn after a sophisticated social‑engineering operation that began with fake job interviews, leading a software engineer to download malicious code. The compromised system, combined with stolen credentials and an internal AI tool, gave the attackers access to Binance’s hot‑wallet infrastructure, enabling unauthorized transfers.
A separate Security Alliance (SEAL) report released on Nov. 4 logged 99 security incidents over a week, including three fraudulent support calls that resulted in the loss of roughly $1.57 m and 1.12 BTC. The scams involved impersonated Apple support and Telegram support agents, with victims inadvertently exposing recovery phrases stored in cloud services.
Yakovenko’s mitigation recommendations
To counter these threats, Yakovenko advises investors to adopt a “cheapest yet effective” security stack: a dedicated iOS device running Apple’s Lockdown Mode and a multisignature wallet. The isolation device limits exposure to malicious links or files, while multisig wallets require multiple approvals for transactions, reducing the impact of a single compromised key.
He also suggests that data‑center operators and crypto service providers reconsider their security postures, a theme echoed in a Crypto Briefing headline that called for data‑center pivots toward crypto‑focused security practices.
What to watch next
Analysts will monitor whether exchanges and wallet providers adopt Yakovenko’s recommendations, particularly the uptake of multisignature solutions and device isolation strategies. Further disclosures from Binance or other large platforms about the role of internal AI tools in facilitating breaches could also shape industry‑wide security standards.

Discussion 0