Ethereum co-founder Vitalik Buterin has warned that cryptocurrency exchanges must prioritize surviving cyberattacks over competing for market share during the next two years, as recent security breaches expose weaknesses in centralized systems. Summary Ethereum co-founder Vitalik Buterin warned that crypto exchanges should prioritise survival over competition for the next two years as major security breaches continue to expose weaknesses in centralised systems. Buterin said recent crypto hacks have increasingly targeted user interfaces and centralised infrastructure, while smart contract exploits have become less common over the past 18 months. He warned that continued attacks, particularly those linked to North Korean hackers, could prompt regulators to impose stricter security requirements on cryptocurrency exchanges and custodians. Buterin urged companies to adopt a defensive approach to security and recommended multisignature wallets and stronger safeguards to protect customer funds. On Ethereum’s roadmap, Buterin said AI, zero-knowledge proofs and formal verification could accelerate network upgrades, while Layer 2 networks should focus on specialised applications. In an interview with Moneycontrol during his visit to India for Devcon 8, Buterin said the industry’s biggest security problems have increasingly moved away from smart contracts and toward the infrastructure that exchanges and custodians use to manage customer assets. He believes major trading platforms and financial institutions will need to adopt a more defensive approach to security, particularly as hackers continue to find ways into systems that control access to cryptocurrency wallets. “What we’ve been seeing is more and more people are realizing that their main responsibility for the next two years is not to win but to survive,” Buterin said. The Ethereum co-founder described the approach as “bunker mode,” under which companies would concentrate on protecting their existing operations and customer funds against increasingly sophisticated attacks. Vitalik Buterin warns exchange hacks could bring stricter regulations Buterin’s comments followed the October 29 Binance security breach, which resulted in the theft of approximately $6.3 billion in cryptocurrencies across multiple blockchains. As crypto.news previously reported, the attack involved compromised wallet infrastructure, with blockchain investigators tracing unauthorized transfers across ten networks. Binance subsequently linked the intrusion to fraudulent job interviews, malicious software and compromised employee systems. Attackers reportedly obtained credentials that allowed them to interfere with the exchange’s wallet signing infrastructure. According to Buterin, one encouraging development is that smart contract exploits have become less common, while the systems surrounding blockchain applications remain vulnerable. “The good news is that smart contract hacks have gone down a huge amount,” he said, adding that major incidents over the past 18 months have been concentrated in user interfaces and centralized components. He expects exchanges to increasingly adopt on-chain systems where transactions can benefit from stronger cryptographic security, citing Binance Smart Chain as an example of infrastructure that supports this approach. The discussion also touched on North Korean hacking operations, which have been linked to major cryptocurrency thefts, including the recent Binance incident. Buterin warned that continued losses to such attackers could eventually prompt regulators to impose stricter security obligations on companies handling digital assets. “If you get hacked and it goes to North Korea, if you go all the way to the extreme, they should treat that as donating to North Korea,” he said. His comments came as South Korean regulators asked domestic cryptocurrency exchanges to strengthen cold storage protections, withdrawal approvals and internal access controls following the Binance breach. Buterin recommended that cryptocurrency holders use multisignature wallets and pay closer attention to how their assets are secured. Lean Ethereum roadmap puts AI and security at the forefront Beyond exchange security, Buterin discussed Ethereum’s development plans for the coming years, particularly the Lean Ethereum roadmap. The initiative focuses on using zero-knowledge proofs, artificial intelligence and formal verification to improve the blockchain’s performance without compromising decentralization or security. Buterin said AI has considerably reduced the time required to develop and verify complex blockchain infrastructure. “The amount of work that is in the rest of this roadmap, by the standards of five years ago, would have taken us 20 years to finish,” he said. He believes AI-assisted development will allow researchers to complete the work much faster while using formal verification to check whether newly developed code and algorithms behave as intended. The comments build on his earlier Ethereum roadmap proposals, in which he argued that AI could accelerate development while allowing engineers to devote more resources to testing and security. Buterin explained that Ethereum intends to rely on conservative hash-based cryptography for its underlying blockchain, while Layer 2 networks should concentrate on applications that offer capabilities beyond basic transaction scaling. He identified high-performance decentralized finance and privacy as two particularly promising areas, citing Lighter and Aztec among the projects pursuing specialized applications. Enterprise blockchain systems could become another important category, particularly where businesses need to verify supply chain, healthcare or manufacturing records without exposing sensitive information. On institutional adoption, Buterin pointed to the growth of tokenized real-world assets on Ethereum over the past 18 months. He acknowledged that traditional financial applications would continue to involve identity checks and restrictions on eligible users, but argued that blockchain-based systems could reduce the number of intermediaries capable of restricting access to funds.
