The crypto industry is on the cusp of a revolution where AI agents will manage various transactions, but research suggests that the underlying infrastructure may be insecure. According to a McKinsey projection, AI agents could facilitate $3 trillion to $5 trillion in global consumer commerce by 2030. Coinbase founder Brian Armstrong predicts that AI agents will soon surpass humans in making internet transactions, with Binance founder Changpeng Zhao estimating that agents will make one million times more crypto payments than people.
However, a group of security academics and crypto researchers have exposed a vulnerability in the AI infrastructure that can be exploited to steal credentials and drain crypto wallets. The researchers found that LLM routers, which act as intermediaries between users and AI models, can be used as attack points by malicious actors.
These routers have access to sensitive data, including private keys, API credentials, and wallet access tokens, which can be stolen and reused without the user's knowledge. The researchers demonstrated how a single malicious router can compromise an entire system, creating a cascading risk that can affect hundreds of downstream systems. This vulnerability poses a significant threat to crypto users, as it can lead to the theft of sensitive information and financial losses.
The study highlights the need for increased security measures to protect the underlying infrastructure of AI-powered crypto payments.