The crypto industry is accelerating towards an AI-driven future where agents manage various tasks, including transactions and payments. However, new research indicates that the underlying infrastructure may be insecure. According to a McKinsey projection, AI agents could facilitate $3 trillion to $5 trillion in global consumer commerce by 2030. Coinbase founder Brian Armstrong predicts that AI agents will soon outnumber humans in making internet transactions, with Binance founder Changpeng Zhao forecasting a significant increase in AI-driven crypto payments.
A group of security researchers has released a paper highlighting the risks associated with a largely overlooked aspect of AI infrastructure, which has already been linked to credential theft and crypto wallet drains. The researchers, affiliated with the University of California and other institutions, found that LLM routers, which act as intermediaries between users and AI models, can be exploited by malicious actors. These routers have access to sensitive data, including private keys and API credentials, making users vulnerable to attacks.
The researchers demonstrated how a single malicious router can compromise an entire system, emphasizing the need for increased security measures to protect against these threats. As the crypto industry becomes increasingly reliant on AI agents, the lack of guarantees regarding the integrity of the underlying infrastructure poses a significant risk to users.