CertiK says AI agents now trace stolen crypto, but humans still own the mistakes

Blockchain security firm CertiK says autonomous AI agents can now chase stolen crypto across chains, write up suspicious activity reports, and hit the pause button on vulnerable smart contracts. There is a catch, and it is a very human one. When an agent gets it wrong, a person still takes the blame. The findings come from CertiK’s Intel3D report, published on October 5, 2026. It focuses on what the industry calls agentic AI: software that acts on its own rather than waiting for someone to type a prompt. Its argument is that crypto attacks now move faster than human analysts can respond. What the agents actually do According to the report, AI agents can monitor on-chain transactions continuously. When they spot a threat, they can trigger defensive responses, including pausing a vulnerable contract within the same block window. CertiK frames this as essential against attacks like flash loans. These exploits borrow huge sums, manipulate a protocol, and repay the loan, all within a single transaction. By the time a human notices, the money is usually gone. The report also highlights laundering. Stolen funds often travel through mixers, which blend coins together to obscure their origi...