India warns AI-powered hackers targeting crypto exchanges at ‘machine speed’

CERT-In is India’s cyber agency, and its November 4 Critical warning places CRAFTY FALCON at the center of a campaign against crypto exchanges and fintech firms in the country. Crypto exchanges handle wallet keys and payment rails sit inside the same financial perimeter, so one warning now spans both custody and transaction flows. The timing matters because the agency is describing a live security issue rather than a historical one.

For exchanges and fintech operators, the immediate concern is the mix of theft of wallet keys and unauthorized transfers through payment systems. That pushes security teams toward tighter key management, faster transaction monitoring, and more aggressive incident response. Firms that rely on automated systems now have to account for an adversary that is also using automation.

The wider trade-off is between the speed of digital finance and the resilience of the systems that support it. AI-assisted attacks at machine speed compress the time defenders have to spot suspicious behavior, isolate accounts, and stop transfers. When the targets include crypto exchanges as well as fintech firms, the pressure reaches both self-custody infrastructure and the payment plumbing that connects users to it.