DEV Community

Cover image for I Left Web3 in 2022. I Returned to an AI Security Crisis.
Rushank Savant
Rushank Savant

Posted on

I Left Web3 in 2022. I Returned to an AI Security Crisis.

The 4-Year Gap

In May 2022, I stopped publishing. I shifted focus to real-estate and AI Automation & RAG (Retrieval-Augmented Generation) engineering.
My Dev.to page has been a ghost town ever since.

The Reality Check

Coming back to Web3, I expected to see a more mature ecosystem. Instead, I found a massive security debt. While we built better L2s and ZK-rollups, the attackers built better extraction agents.

Why the 2022 Playbook is Dead:

  • Hyper-Personalized Phishing: AI bots scrape your GitHub/X to craft "dev-to-dev" messages you will trust.

  • Automated Drains: Scammers are using RAG tech to find 1-line vulnerabilities in your legacy 2022 code.

  • The Mailbox Vector: Leaked data is being used to mail physical "fake" hardware wallets to users.

The $285M Drift Protocol Phishing hack earlier this month was the final proof for me. It wasn’t just a bad link; it was a multi-stage AI attack that bypassed institutional security.

The Pivot

I’m no longer just a dev. I’m turning into Security Architect at the intersection of AI and Web3.

My New Stack Rule: In a world of AI-generated lies, Open Source is the only firewall. If it’s not open-source, it’s a vulnerability.

Let’s get to work.

Top comments (0)