Immunefi CEO: On-chain security is improving, but humans are becoming the biggest vulnerability in crypto security.

According to Mars Finance, Immunefi CEO Mitchell Amador stated in a recent interview that while cryptocurrency losses continue to rise, on-chain security is improving. 2025 was the worst year for hacking on record, but the biggest security failures did not originate from on-chain code, but rather from operational errors in Web2, such as passwords, private keys, infected devices, and human error. As code becomes increasingly difficult to exploit, the main attack surface for crypto security in 2026 will be humans, and the human factor has become a vulnerability that Web3 participants must prioritize. This view aligns with the findings of a Chainalysis report. The report shows that cryptocurrency losses due to fraud and scams amounted to approximately $17 billion in 2025. Among these, identity theft scams increased by 1400% year-on-year, while AI-driven scams were 450% more profitable than traditional methods.