A16z Crypto Calls for DeFi to Shift from "Code is Law" to "Regulation is Law" to Address Vulnerability Crisis

Mars Finance reports that a16z Crypto Senior Security Researcher Daejun Park published a post calling for DeFi protocols to shift from “code is law” to “standards are law,” adopting more principled security approaches. The specific method involves hardcoding security guarantees through standardized norms and invariant checks, automatically reverting transactions that violate predefined rules. Park pointed out that almost all known vulnerabilities trigger such checks, which could prevent hacker attacks during execution. According to a Slowmist report, hackers stole over $649 million through code vulnerabilities last year. Even the longstanding protocol Balancer, operating since 2021, lost $128 million last November due to a code flaw. Developers are concerned that hackers are increasingly using AI to find vulnerabilities. Immunefi Security Director noted that invariant checks increase gas costs and may drive away users, and are not a panacea. Co-founder of Asymmetric Research stated that many vulnerabilities are difficult to write invariant rules that can detect attacks without false positives.