Coinbase’s Lunglhofer Discusses the Intersection of Deepfakes, Supply Chain Risks, and Human Expertise
In a recent discussion, Jeff Lunglhofer, the Chief Security Officer at Coinbase, highlighted the increasingly sophisticated ways that bad actors are navigating the realms of fraud and cybersecurity. As artificial intelligence continues to evolve, the lines separating these two areas are becoming increasingly blurred. Lunglhofer pointed out that criminals are no longer working with rudimentary techniques; instead, they are leveraging social engineering, deepfakes, and technical guidance to specifically target customers within the financial services sector.
One pressing concern raised by Lunglhofer is the ongoing exploitation of protocol-level vulnerabilities within cryptocurrency and decentralized finance platforms, particularly by North Korean threat actors. These organized crime groups are not just attacking isolated systems; they are engaging in polished impersonation campaigns designed to mimic financial institutions, trusted relatives, and various recognizable contacts. The incorporation of artificial intelligence has enabled these attackers to clone voices and craft highly convincing scenarios to manipulate their victims, guiding them through deceptive technical steps that often culminate in fraud.
Moreover, the attack surface has now expanded beyond traditional entry points. According to Lunglhofer, it includes software supply chains, self-custody devices, mobile phones, and connected products, thereby increasing the risk for users who rely on digital platforms for financial transactions. He emphasizes that the ease with which an individual can be cloned is unprecedented, stating, “Virtually anybody can be cloned anytime, and that is pretty new.” This alarming development points to the need for heightened security measures and awareness among users.
During an engaging video interview conducted by ISMG at Black Hat USA 2026, Lunglhofer elaborated on various pressing topics pertinent to cybersecurity and the financial sector. He discussed how North Korean actors exploit vulnerabilities in cryptocurrency and decentralized finance protocols and the strategies employed by attackers utilizing AI-assisted social engineering techniques. He stressed the importance of understanding how targeted deepfakes can significantly elevate fraud risks.
In an effort to address these multifaceted threats, Lunglhofer posits that there needs to be a collaborative approach between AI-models and cybersecurity experts. One of the focal points of this partnership should be the development of improved defensive strategies. By leveraging machine learning to analyze threat vectors and anomalies more effectively, organizations can bolster their cyber defenses. This collaborative model holds promise in combating the growing sophistication of cyber threats.
Steering the security strategy at Coinbase, Lunglhofer oversees various aspects including cyber strategy, operations, engineering, and architecture, as well as trust and safety measures aimed at both retail and institutional customers. His extensive experience is further backed by his previous role as the Chief Information Security Officer at the Bank of New York Mellon, where he honed his skills in navigating the complex terrain of cybersecurity.
As the world increasingly relies on digital transactions and cryptocurrency, the implications of failing to address these emerging threats could be severe. Financial institutions and their customers must remain vigilant to the evolving tactics used by fraudsters. Cooperation between technological advancements and human expertise will be vital in establishing robust defenses against a future where the capabilities of AI may both protect and exploit.