The cryptocurrency industry is on the verge of a significant transformation, with AI agents poised to handle a wide range of tasks, including payments and transactions. However, a recent study suggests that the underlying infrastructure may be vulnerable to security risks. According to the research, a largely overlooked component of AI infrastructure, known as LLM routers, can be exploited by malicious actors to steal sensitive data and drain crypto wallets. These routers, which act as intermediaries between users and AI models, have full access to sensitive data and can be used to launch powerful attacks.
The researchers found that multiple LLM routers are secretly injecting malicious code and stealing credentials, with one instance resulting in the theft of $500,000 from a client's wallet. The study highlights the severe implications for crypto users, as private keys, API credentials, and wallet access tokens often pass through these systems in plain text. The researchers warn that a single malicious router in the chain can compromise the entire system, posing a significant risk to the security of crypto transactions.