Arbitrum Pauses New Stylus Contract Activation Over AI-Assisted Attack Risks
The L2 team has halted new Stylus contract deployments to assess an expanded attack surface from AI-assisted tooling, with no timeline for resuming activations.
Arbitrum Pauses New Stylus Contract Activation Over AI-Assisted Attack Risks
The Arbitrum development team has paused the activation of new Stylus contracts, citing the need to assess the expanded attack surface that AI-assisted tools may introduce. Stylus allows developers to write smart contracts in languages such as Rust and C++, compiling them to WASM for execution on the Arbitrum chain, and was previously seen as a key upgrade for expanding the developer ecosystem.
According to the team's announcement, the pause applies only to the activation process for new contracts. Already deployed Stylus contracts are unaffected, and existing applications can still call them normally. The team did not provide a timeline for resuming activations, saying only that further notice would follow once the security assessment is complete.
The decision comes amid the rapid proliferation of AI code-generation tools. Automated tools can significantly lower the barrier to writing contracts, but they may also be used to probe or construct boundary-condition attacks at scale. For on-chain infrastructure, striking a balance between open developer access and pre-settlement security review is becoming a new variable in L2 competition.
Source: https://news.google.com/rss/articles/CBMif0FVX3lxTE5waGY4WnBLY1V4Y3BLQWNNS1N1aEJVZktPbjR0WGNwbGhtRkJWTDBTTzRIcm9vbFp2a3ZrUVNRVXBtQWVkUVozSGJnRkNwdmhFRHl5V29IMkdDa3R2LUI5MEFRaUMyN20wRXQydjc0UXNwcmRJN2tVVzFGMm5SQjg?oc=5
Provenance & status
- Byline
- OceanAlt Editorial
- First published
- 2026-10-05
- Last updated
- 2026-10-05
- Content type
- Newsflash
- Source material
- View original ↗
Related reading
NVIDIA Open-Sources Agent Security Platform: Another Piece in the Agent Security Infrastructure, from Testing to Deployment
Robinhood Lets AI Agents Trade Without Per-Order Approval — and Clients Bear the Losses
OpenAI Agent Crosses the Line into Australian Government Website: First Confirmed AI Agent Intrusion
Paste a payee address before you pay and see whether it's on a sanctions list, through a mixer, or tagged for fraud.
This judgement can sit inside your own product
One line of code; it touches neither your CSS nor your JS. The same pre-settlement judgement can appear in your articles, on your wallet's confirmation screen, or as an endpoint your agent calls before it pays.