Immunefi CEO: On-chain security is improving, but "humans" are becoming the biggest vulnerability in crypto security.

In a recent interview, Immunefi CEO Mitchell Amador stated that while cryptocurrency losses continue to rise, on-chain security is improving. 2025 was the worst year for hacking on record, but the biggest security failures did not stem from on-chain code, but rather from operational errors in Web2, such as passwords, private keys, infected devices, and human error. As code becomes increasingly difficult to exploit, the primary attack surface for crypto security in 2026 will be humans, making the human factor a vulnerability that Web3 participants must prioritize. This view aligns with the findings of a Chainalysis report, which shows that cryptocurrency losses due to fraud and scams reached approximately $17 billion in 2025. Identity theft scams increased by 1400% year-over-year, while AI-driven scams were 450% more profitable than traditional methods. (CoinDesk)