When AI Learns to Become a White Hat Hacker: A Fully Automated Pipeline from On-Chain Vulnerability Scanning to Fund Rescue

Smart contract incidents aren’t just a code problem—they’re an operations problem: threats emerge on-chain continuously, time-to-triage is short, and “finding a bug” is not the same as proving exploitability or preventing loss.

This talk presents an autonomous security agent designed to close the loop from discovery to action. Instead of only auditing source code or generating standalone proofs-of-concept, it continuously scans on-chain contracts, prioritizes targets using discovery heuristics, generates and validates exploit PoCs, estimates real economic impact via simulation, and performs rescue to reduce loss when authorized.

We’ll cover the system architecture, and focus on the most difficult part of the loop: how to move from a suspected vulnerability to an exploitable PoC, and then how to turn that PoC into an actually deployable attack or rescue contract. Through 1–2 concrete examples of vulnerabilities that could lead to fund loss (e.g., Reentrancy), we’ll discuss how the agent reasons about exploitability, gathers the required on-chain context, validates the exploit through simulation, and adapts the PoC into executable rescue logic.

The goal is simple: move smart contract security from periodic audits to continuous, end-to-end defense operations that prioritize what is actually exploitable, what matters economically, and what can be acted on safely.