The cryptocurrency sector is rapidly adopting AI agents to facilitate various transactions, but recent findings suggest that the underlying infrastructure may be flawed. According to a report by McKinsey, AI agents are projected to mediate between $3 trillion and $5 trillion in global consumer commerce by 2030.
However, a team of security researchers has identified a critical vulnerability in the AI infrastructure that could compromise user credentials and drain crypto wallets. The researchers found that so-called 'LLM routers' can act as a powerful attack point, allowing malicious actors to intercept sensitive data. These routers, designed to forward requests to AI models, have full access to user data, including private keys and API credentials.
The researchers demonstrated that a single malicious router can compromise an entire system, highlighting a weakest-link problem. This vulnerability has already been linked to stolen credentials and a $500,000 wallet drain, emphasizing the need for increased security measures to protect crypto users.