The cryptocurrency sector is rapidly advancing towards an era where AI agents manage various tasks, including transactions and payments. However, a new study suggests that the underlying infrastructure may be insecure.
According to a McKinsey projection, AI agents could facilitate $3 trillion to $5 trillion in global consumer commerce by 2030. Coinbase founder Brian Armstrong predicts that AI agents will soon outnumber humans in making internet transactions, with Binance founder Changpeng Zhao forecasting that agents will make millions of times more payments than people, all in crypto. A group of security academics and crypto researchers has released a paper highlighting the risks associated with a largely overlooked aspect of AI infrastructure, which has already been linked to stolen credentials and a $500,000 wallet drain.
The researchers, affiliated with the University of California, Santa Barbara, the University of California, San Diego, blockchain firm Fuzzland, and World Liberty Financial, found that 'LLM routers' or services that connect users to AI models can be exploited by malicious actors. These routers have full access to sensitive data, including credentials and private keys, which can be stolen or modified. The researchers noted that LLM agents have moved beyond conversational assistants to manage real-world tasks, making them vulnerable to attacks. The problem is no longer theoretical, with one researcher, Chaofan Shou, stating that 26 LLM routers have been found to be secretly injecting malicious tool calls and stealing credentials.
The researchers demonstrated how a single malicious router can compromise an entire system, highlighting a weakest-link problem. This creates a potential mismatch between the growing use of AI agents in crypto activity and the lack of guarantees that the underlying infrastructure is secure.