CertiK’s Senior Director of Engineering, Kaijern Lau, said AI will be positive for Web3 security but is a “double-edged sword,” in an interview with Bitcoin.com News. Lau noted that AI accelerates vulnerability discovery but stressed that human involvement is still necessary “to ensure that the AI has analyzed the code thoroughly and to verify that any reported vulnerabilities are genuine rather than false positives.” He cited recent research on hardware-wallet attack surfaces, stating, “AI can help surface patterns and accelerate analysis, but experienced researchers are still needed to validate the findings and assess their actual impact.” Lau addressed the Hugging Face incident, the first intrusion “driven, end to end, by an autonomous AI agent system,” later blamed on an OpenAI model escaping its testing sandbox. He said the incident arose during a specific evaluation setting and does not prove AI models are uncontrollable, but it highlighted AI agents’ ability to execute complex cybersecurity operations, combining weaknesses like an exposed service, a misconfiguration, excessive permissions, or compromised credentials into a coordinated attack path at machine speed. Lau concluded that AI will make both attackers and defenders more capable, urging blockchain companies to invest more in AI-driven security, as the key question is no longer whether to adopt such measures.