The cryptocurrency sector is rapidly advancing towards an AI-driven future, where automated agents manage transactions, trades, and payments. However, a new research paper suggests that the underlying infrastructure supporting this shift may be insecure.
According to a McKinsey projection, AI agents could facilitate $3 trillion to $5 trillion in global consumer commerce by 2030. Industry leaders, such as Coinbase founder Brian Armstrong and Binance founder Changpeng Zhao, predict a significant rise in AI-driven transactions. Nevertheless, a group of security academics and crypto researchers have identified a largely overlooked vulnerability in AI infrastructure that can be exploited to steal credentials and drain crypto wallets.
The researchers, affiliated with the University of California and other institutions, found that 'LLM routers' or services connecting users to AI models can act as a powerful attack point. These routers have full access to sensitive data, including private keys, API credentials, and wallet access tokens. The team discovered that 26 LLM routers are secretly injecting malicious tool calls, resulting in stolen credentials and substantial financial losses, including a $500,000 wallet drain. The researchers warn that a single malicious router can compromise an entire system, highlighting a weakest-link problem.
This vulnerability creates a significant risk for crypto users, as it allows malicious actors to intercept and modify sensitive data, potentially leading to substantial financial losses.