AI can break captchas but cannot fake onchain balances.

True: as of 2025-08-03, AI systems can solve captchas, and AI cannot fake balances recorded onchain, meaning it cannot produce a false balance that passes checks against the real blockchain state without compromising keys or consensus. Mostly true: both parts hold in substance, with a small caveat (for example, AI can fool a naive interface or a forged screenshot, but not a verified onchain balance). Mixed: one part holds and the other is materially wrong. Mostly false: both parts are substantially overstated. False: both parts are shown to be wrong.

Set before the research began.

1. E1 Breaking reCAPTCHAv2 arXiv (ar5iv render); accepted at COMPSAC 2024 · 20 February 2024

   “Our main result is that we can solve 100% of the captchas, while previous work only solved 68-71%.”

2. E2 Are {CAPTCHAs} Still Bot-hard? Generalized Visual {CAPTCHA} Solving with Agentic Vision Language Model USENIX Association (USENIX Security 25) · 1 November 2024

   “which achieves a solving rate of 60.7% on 2,600 challenges belonging to 26 types of visual CAPTCHAs.”

3. E3 State Root: Blockchain's Cryptographic State Commitment ChainScore Labs (glossary) · 3 November 2026

   “acts as a tamper-evident commitment, allowing any network participant to cryptographically verify that a specific piece of state data (e.g., an account's ETH balance) is correct and current”

4. E4 onchain-postmortems/verus-ethereum-bridge-forged-proof/README.md at main · RealSpap/onchain-postmortems GitHub (RealSpap/onchain-postmortems repository) · 17 May 2026

   “an attacker forged a cross-chain proof root and got the bridge's own Ethereum contract to release funds against an export that never existed on the Verus chain”

The first part holds. Independent research shows automated systems solving captchas: E1 reports a 100% solve rate on reCAPTCHAv2 image challenges, and E2 reports an agentic vision-language model solving 60.7% of 2,600 challenges across 26 visual captcha types. On the second part, E3 says the state root lets any network participant cryptographically verify an account's balance against the real chain, which supports the claim that a fake balance cannot pass checks against actual blockchain state. One caveat applies: E4 describes a forged proof that got a bridge contract to release funds, so a weak verifier can still be fooled. That attack did not fake the real chain state, and E4 does not say AI was involved, so I rate the claim mostly true rather than fully true.