Solana (SOL) CISO Warns AI Scams Are the No. 1 Crypto Threat

The Solana (SOL) Foundation’s chief information security officer, Michael Coates, says the crypto industry’s most serious security failures are increasingly beginning outside blockchains, in Web2 account and key-management environments, rather than in smart-contract code. Coates, who previously held senior security roles at Twitter and Mozilla, argued that attackers are following the path of least resistance: they target login credentials, signing keys, employee access, and operational mistakes because those vectors can produce irreversible transfers of value. Recent large losses across crypto have often followed credential compromise or fraudulent approvals rather than a flaw in the underlying consensus mechanism. In his framing, the protocol layer is often not the weakest link; the people, browsers, cloud accounts, and approval workflows around it are. That distinction matters for an altcoin ecosystem where wallets, bridges, and decentralized applications depend on users signing transactions quickly. Coates also warned that artificial intelligence is changing social engineering, effectively placing AI-enabled deception as the No. 1 emerging security risk for crypto users and teams. Deepfake voice and video can make a fraudulent instruction sound like a colleague, friend, or executive, and automation can push such attacks at scale. The result is a threat environment where traditional phishing awareness is no longer sufficient. He urged teams to assume that users will eventually be deceived and to build layered controls that contain a single failure before it becomes a total loss. Those controls can include multisig approvals, withdrawal allowlists, anomaly detection, separation of duties, and tighter wallet-permission design. For developers, the message is that security cannot be a final checklist item; it must be embedded in product architecture, especially where an AI Crypto Wallet or automated signing flow can move funds without a human reviewing every detail. Coates’ broader point is that crypto’s adversarial model is changing: the sector must defend against both conventional web-security breaches and new AI-enabled deception, while accepting that finality of settlement makes mistakes especially costly.

Coates’ appointment also signals that the Solana Foundation is trying to professionalize security across a wider ecosystem, not only inside the foundation itself. His remit includes working with project teams on stronger engineering practices, engaging regulators on cybersecurity standards, and translating lessons from mature internet companies into Web3 operations. In public remarks, he stressed that blockchain projects must do everything a traditional web company does to protect accounts and infrastructure, then add the extra protections required by self-custody and programmable money. That includes defending against compromised credentials, malicious browser extensions, and fraudulent transaction requests that can appear routine. A particular concern is blind signing, where users approve messages they cannot fully interpret, creating room for attackers to drain assets without exploiting the chain directly. Coates said AI will make such deception easier, with fully spoofed phone calls and messages that imitate trusted contacts. His proposed response is “default secure” design: systems should protect users even when they click, sign, or trust the wrong request. Instead of expecting every user to become a security expert, products should limit permissions, surface clear warnings, isolate high-value keys, and require additional confirmation for unusual actions. That approach also matters for institutional adoption, where compliance teams scrutinize incident response, access controls, and audit trails before approving integration. The foundation is also looking further ahead at quantum computing. Coates described “Q-day” — the point at which quantum machines could break current public-key cryptography — as an uncertain but serious long-term risk, and said Solana has been evaluating post-quantum algorithms. The challenge is to prepare for that transition without sacrificing the performance characteristics that make the network attractive for high-throughput applications, including an Automated Market Maker (AMM) or consumer payment use case. In practical terms, the security agenda is becoming a product differentiator: ecosystems that reduce user error and survive credential attacks may retain more trust than those that rely on vigilance alone.

Beyond security hardening, the Solana ecosystem is registering concrete signs of institutional integration. Global remittance firm MoneyGram has joined the network as an active validator, contributing directly to consensus security and decentralization through the Solana Developer Platform. The move represents a traditional finance company staking its operational reputation on Solana's infrastructure rather than merely building an application atop it. Separately, the network has introduced the SGP (Solana Governance Proposal) framework, which enables validators to vote on core governance measures weighted by their staked SOL, formalizing on-chain decision-making that previously relied on informal coordination. Together, these developments suggest the ecosystem is maturing along the institutional and governance axes that Coates identified as prerequisites for broader adoption, even as short-term price action remains constrained by declining DEX activity and a broader market correction.

(as of 18:41 UTC) COINOTAG's proprietary 42-indicator composite S/R scoring engine shows Solana trading at $71.34, down 2.25% over 24 hours, with the strongest resistance at $73.57 rated 81/100, driven by Pivot Point, ATR Upper, Ichimoku Tenkan, and Ichimoku Senkou A confluence. The nearest support at $70.09 scores 77/100, anchored by Supertrend, ATR Lower, Fibo 0.236, and S3 signals. Derivatives positioning remains crowded long: funding is positive at 0.0031%, open interest is $1.34 billion, and the long/short account ratio is 3.27, meaning 76.6% of accounts are long. With Fear and Greed at 27/100 and MACD confirming a bearish trend, sentiment is fearful, so a break above $73.57 could squeeze late shorts, while loss of $70.09 would deepen the downtrend and open $64.49.