A Chainalysis report reveals that attackers have stolen at least $36.7 million from unverified smart contracts in the past six months. Protocols such as Truebit, Trusted Volumes, Aperture Finance, and Ekubo have been targeted due to their unverified source code. Attackers exploit vulnerabilities by decompiling raw bytecode, a process increasingly aided by AI tools that identify vulnerability patterns at scale. The report highlights that unverified contracts lack community scrutiny and are often not included in bug bounty programs, making them attractive targets. The decreasing barrier to AI-assisted decompilation and vulnerability analysis allows attackers to systematically scan thousands of unverified contracts. Chainalysis recommends that protocols verify all contract code, audit deployed contracts, expand bug bounty programs, and implement real-time on-chain monitoring to enhance security.