The Internet Computer network withstood what DFINITY co-founder Dominic Williams described as a widespread, AI-enabled attack involving hundreds of canisters using malformed WebAssembly (Wasm) modules.
Williams made the claims in a post on X, saying the incident came as development around upcoming Internet Computer projects and services, including ICP cloud engines, Open SaaS, Intelligence Gateway and MULTI/DEX, continues.
According to Williams, the network faced an attack in which hundreds of canisters were involved through malformed Wasm modules. He did not provide technical details in the post about the nature of the modules, the method used to distribute them or whether any user funds or data were affected.
Williams also alleged that the incident was part of a wider campaign targeting the Internet Computer and its community. He claimed that coordinated social media accounts had been posting similar negative messages about the network and alleged that some of the accounts were linked to paid agencies.
Those allegations were not accompanied in the post by publicly available evidence identifying the organisations or individuals allegedly responsible.
Williams said DFINITY was seeking information that could help establish who was behind the attacks. He said the organisation would offer rewards to people who could help identify those responsible and bring them to justice.
The comments come amid broader attention on the security of decentralised computing networks as artificial intelligence tools make it easier to automate certain forms of software development and potentially automate malicious activity. Malformed or deliberately crafted WebAssembly modules can present security challenges for platforms that execute Wasm-based applications, making validation and isolation important parts of network security.
Williams linked the alleged attacks to what he described as growing interest in the Internet Computer’s forthcoming technology and applications. He also criticised sections of the wider digital-asset industry, arguing that some organisations have an interest in protecting existing business models from new technology.
His post contained strong allegations about unnamed actors, including claims of criminal activity and paid influence campaigns. These claims have not been independently established based on the information provided.
The Internet Computer is developed as a decentralised computing platform in which applications run through software containers known as canisters. WebAssembly is used to execute the code powering those canisters.
At this stage, the public account from Williams provides the main details about the reported incident. Further technical information from DFINITY or independent security researchers would be needed to establish the attack’s scope, its impact on the network and who was responsible.
Dear Reader,
Ledger Life is an independent platform dedicated to covering the Internet Computer (ICP) ecosystem and beyond. We focus on real stories, builder updates, project launches, and the quiet innovations that often get missed.
We’re not backed by sponsors. We rely on readers like you.
If you find value in what we publish—whether it’s deep dives into dApps, explainers on decentralised tech, or just keeping track of what’s moving in Web3—please consider making a donation. It helps us cover costs, stay consistent, and remain truly independent.
Your support goes a long way.
🧠 ICP Principal: ins6i-d53ug-zxmgh-qvum3-r3pvl-ufcvu-bdyon-ovzdy-d26k3-lgq2v-3qe
🧾 ICP Address: f8deb966878f8b83204b251d5d799e0345ea72b8e62e8cf9da8d8830e1b3b05f
Every contribution helps keep the lights on, the stories flowing, and the crypto clutter out.
Thank you for reading, sharing, and being part of this experiment in decentralised media.
—Team Ledger Life





Community Discussion