macro

CZ downplays AI hacking risk to crypto, flags phishing as bigger danger

Binance founder CZ says AI is unlikely to break crypto encryption, but phishing and leaked data pose real risks. He also flagged PHP flaws on October 22.

the public page opens no earlier than 15 minutes after we detect the story. approved stories may reach the api sooner. connect the api →

what happened

Binance founder Changpeng Zhao, known as CZ, argued in a post on X on October 23, 2026, that worries about AI breaking crypto encryption are exaggerated, according to Crypto Briefing. He said the bigger danger lies in AI-enhanced phishing, social engineering and the misuse of leaked personal data. In his view, attackers do not need to defeat cryptography to cause harm.

CZ noted that banking systems and parts of the wider internet rely on weaker encryption standards than crypto networks, so older infrastructure would be an easier target if AI code-breaking became a real threat. The day before, on October 22, he pointed to two PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, linked to an exploit called PHP2Shell. According to him, they could potentially let attackers run code remotely on unpatched servers, and he urged quick updates. He signed off with 'Stay SAFU!'.

why it matters

For ordinary holders, the practical lesson is to treat urgent, unexpected messages with suspicion, verify links before connecting a wallet, and assume some personal data is already accessible to attackers. For exchanges and developers, the PHP flaws show that server software and third-party code can be a weak spot even when smart contracts are sound. The remarks were general and not tied to any specific token, so they are unlikely to move prices directly.

tags

sources

  1. CZ says AI hacking fears in crypto are overblown, warns phishing is the real threat — Crypto Briefing, 23 October 2026 at 04:23 UTC

prepared by the newsmetry newsroom with ai assistance from the sources listed below. not investment advice.

the public page opens no earlier than 15 minutes after we detect the story. approved stories may reach the api sooner.

get stories in real time ↗