India Warns AI Hackers Are Targeting Crypto Exchanges
India’s national cybersecurity agency CERT-In has warned that an escalating AI-assisted hacking campaign is targeting crypto exchanges and other financial firms. The agency named the threat actor “CRAFTY FALCON” and said attacks remain active, including against businesses that had already taken remedial action after earlier warnings.
Attackers reportedly exploit vulnerable applications, exposed test environments, shared credentials and access tokens to reach production systems. They use AI tools to generate and refine scripts, reverse-engineer application code and create tailored exploits. In some cases, they test unauthorized transfers with small transactions before moving larger sums. CERT-In said the campaign has stolen cryptocurrency wallet keys and drained funds, but did not identify affected exchanges or disclose losses.
The agency urged at-risk firms to strengthen round-the-clock monitoring, particularly on weekends and holidays. The warning highlights growing cybersecurity risks for crypto exchanges as AI enables faster, more targeted attacks.
Bearish
The warning is bearish for sentiment around crypto exchanges because CERT-In says the campaign is active and escalating, and that attackers have stolen wallet keys and drained funds. It could prompt short-term caution among traders, especially around exchanges named in public discussion, and may increase withdrawals, security-related questions and volatility if a specific breach or loss is later confirmed. However, the agency has not identified affected exchanges or quantified losses, so the report alone does not establish a sector-wide solvency risk or a direct threat to crypto prices.
Past exchange hacks have often triggered sharp, temporary declines in the affected platform’s token or broader market jitters, particularly when losses were large or customer funds were uncertain. Longer term, this news may increase pressure on exchanges to improve access controls, monitoring and incident response, while reinforcing demand for stronger custody and continuous security reviews. Traders should distinguish the confirmed warning from unverified claims about particular platforms and watch for exchange disclosures, withdrawals, on-chain movements and any evidence of wider contagion.