Smart Contract Developers Believe AI Coding Enhances Crypto Security Despite Concerns

Smart contract developers and auditors have expressed confidence that the use of artificial intelligence (AI) in programming will ultimately make the crypto ecosystem safer, despite earlier reports highlighting potential security risks associated with AI-generated code. A November 2024 report by the Center for Security and Emerging Technology warned that AI-assisted programming could pose cybersecurity challenges. The report pointed out that AI often produces insecure code and that AI models themselves may be vulnerable to attacks and manipulation. Additionally, the study noted that insecure AI-generated code could propagate downstream, influencing future AI training datasets. The researchers found that nearly half of the code snippets produced by five different AI models contained bugs. Another study from July 2024 developed a benchmark covering 180 tasks and 44 vulnerability types, revealing that state-of-the-art AI models had a median secure-code pass rate below 35%. Despite these findings, many smart contract developers and auditors remain optimistic about AI's role in improving crypto security.

AI Augments, But Does Not Replace Developers

Developers interviewed emphasized that AI tools serve as supplements rather than replacements for human programmers. 0xAw, the pseudonymous lead developer at the Base decentralized exchange Alien Base, told Cointelegraph that he primarily uses AI to get quick reference checks and generate "cookie-cutter" code. He has recently started using AI to perform quick sanity checks on code, especially for obvious issues. Anton Holovchenko, senior blockchain developer at Hacken, uses Cursor, an AI-integrated development environment, for auto-completions and templating. However, he stresses that developers must adjust AI-generated code to their needs and correct mistakes. Holovchenko distinguishes this from "vibe coding," a term describing AI coding with minimal human oversight. Shantanu Sontakke, security engineer at web3 security firm Zokyo, shared that he uses AI mainly for prototyping blockchain and AI side projects rather than for complete smart contract development.

AI is Common in Smart Contract Programming

0xAw noted that AI usage is widespread among developers, typically as an assistant tool. He added that while AI saves time for senior programmers, it is usually too imprecise to handle entire coding tasks independently. Mike Tiutin, blockchain architect and CTO at crypto forensics company AMLBot, said AI use is "quite high" in the industry. Holovchenko mentioned that nearly every developer he knows uses AI tools, primarily ChatGPT and Cursor. Sontakke observed that AI-assisted programming environments are becoming increasingly popular, boosting productivity and saving time. This shift allows auditors to focus more on exploring attack surfaces and identifying complex bugs.

AI is Expected to Improve Web3 Security

Holovchenko believes AI-assisted programming will improve code quality when paired with knowledgeable developers:

"If you’re just vibe coding or delegating too much to AI, you will just see in the end of AI answer ‘Your code is safe now,’ and you will believe it because you don’t know how to code and your code can be actually not safe. In my opinion AI can increase the code quality but only in pair with a human who understands the coding."

Sontakke added that AI has made producing documentation and code commenting easier, leading to more precise and informative project documentation. 0xAw has noticed junior developers relying heavily on AI, sometimes with poor results. However, he believes AI use in Web3 programming is acceptable since smart contract development involves extensive testing and refinement, which helps catch bugs before deployment. He cautioned that excessive reliance on AI might hinder junior developers from advancing to senior roles. Tiutin expects AI tools to result in protocols with stronger baseline security by reducing careless mistakes. He also anticipates cost optimizations in smart contract auditing firms without affecting audit prices, emphasizing that audits are more about sharing responsibility than guaranteeing contract security.

Additional FAQ

How does AI assist in smart contract development?

AI assists by providing quick reference checks and generating template code, which saves time for developers. However, the code often needs human oversight to correct potential inaccuracies.

Are AI tools commonly used in the crypto industry?

Yes, AI tools like ChatGPT and Cursor are widely used among developers in the crypto industry to boost productivity and reduce coding time.

Can AI replace human programmers in smart contract development?

AI serves as a supplement to human developers by enhancing productivity but cannot fully replace skilled human oversight required for smart contract development.

Crypto Market's Take

At Crypto Market, we envision AI playing a pivotal role in enhancing security and efficiency across the crypto trading space. Our AI-driven crypto trading tools leverage sophisticated algorithms for market predictions and automated trading, offering traders advanced strategies to optimize their portfolios. As we continue to innovate in AI technology, our platform tools ensure safe and effective trading experiences, adhering to strict compliance and testing standards pivotal in smart contract and blockchain development.

Smart contract devs think AI code will make crypto safer despite vibe coding fears