The crypto industry is on the cusp of a revolution, with AI agents poised to handle a wide range of tasks, from flight bookings to trade executions and payments. However, a new study reveals that the underlying infrastructure may be vulnerable to attacks. According to a report by McKinsey, AI agents are expected to facilitate $3 trillion to $5 trillion in global consumer commerce by 2030. Coinbase founder Brian Armstrong predicts that AI agents will soon outnumber humans in making transactions on the internet, with Binance founder Changpeng Zhao forecasting that agents will make one million times more payments than people, all in crypto.
Nevertheless, a team of security academics and crypto researchers has identified a largely overlooked weakness in AI infrastructure that can be exploited to steal credentials and drain crypto wallets. The researchers, affiliated with the University of California, Santa Barbara, the University of California, San Diego, blockchain firm Fuzzland, and World Liberty Financial, found that LLM routers, which act as intermediaries between users and AI models, can be used as a powerful attack point by malicious actors.
These routers have full access to sensitive data, including private keys, API credentials, and wallet access tokens, which can be used to compromise systems or funds. The researchers demonstrated how a single malicious router can replace benign commands with attacker-controlled ones or silently exfiltrate credentials, highlighting the severe implications for crypto users.
They also showed how easy it is to expand the attack by poisoning parts of the router ecosystem, allowing them to observe and potentially control hundreds of downstream systems within hours. The study underscores the need for guarantees that the underlying infrastructure is secure and trustworthy, particularly as industry leaders predict that AI agents will handle a growing share of crypto activity.