The cryptocurrency sector is rapidly moving towards an AI-driven future, where automated agents manage transactions, trades, and payments. However, recent research reveals that the underlying infrastructure may be insecure, posing significant risks to users. According to a report by McKinsey, AI agents may facilitate between $3 trillion and $5 trillion in global consumer commerce by 2030. Coinbase founder Brian Armstrong predicts that AI agents will soon outnumber humans in making internet transactions, with Binance founder Changpeng Zhao forecasting that agents will make millions of times more crypto payments than people.
A group of security experts and crypto researchers from the University of California, Santa Barbara, the University of California, San Diego, and other institutions have published a paper highlighting the vulnerability of a critical component of AI infrastructure. The researchers found that so-called 'LLM routers,' which act as intermediaries between users and AI models, can be exploited by malicious actors to steal sensitive data, including credentials and crypto wallet information. These routers have full access to user data, including sensitive information, and can modify or exfiltrate it without detection.
The researchers demonstrated that a single compromised router can compromise an entire system, highlighting a weakest-link problem. They also showed that it is possible to 'poison' parts of the router ecosystem, allowing malicious actors to control hundreds of downstream systems within hours.
The implications for crypto users are severe, as private keys, API credentials, and wallet access tokens often pass through these systems in plain text. The researchers found multiple cases where routers collected these secrets, and in one instance, a test Ethereum wallet was drained after its private key was exposed. The team warns that the use of AI agents in crypto transactions poses a cascading risk, as even if a user trusts their AI provider, the infrastructure in between may not be trustworthy.