The rapid growth of the cryptocurrency industry is driving the adoption of AI agents to manage various transactions, including payments and trades. According to a McKinsey projection, AI agents could facilitate $3 trillion to $5 trillion in global consumer commerce by 2030.
However, a group of researchers has identified a critical flaw in the AI infrastructure that underpins this shift, which could compromise the security of user wallets. The researchers found that LLM routers, which act as intermediaries between users and AI models, can be used to intercept sensitive data, including private keys and API credentials.
This vulnerability has already been linked to several instances of stolen credentials and a $500,000 wallet drain. The researchers warn that the problem is no longer theoretical and that a single malicious router can compromise an entire system, highlighting the need for increased security measures to protect user wallets. As the use of AI agents in crypto payments continues to grow, the lack of guarantees that outputs haven't been tampered with creates a potential mismatch between the industry's predictions and the underlying infrastructure's security.