The rapid growth of the cryptocurrency industry is driving the adoption of AI agents to manage various transactions, including payments and trades. According to a report by McKinsey, AI agents may facilitate between $3 trillion and $5 trillion in global consumer commerce by 2030. However, a group of researchers has identified a critical flaw in the AI infrastructure that underpins these transactions.
The researchers found that LLM routers, which act as intermediaries between users and AI models, can be used to steal sensitive data, including private keys and API credentials. This vulnerability has already been linked to several instances of stolen credentials and a notable case of a $500,000 wallet drain. The researchers warn that the use of LLM routers creates a significant attack point, as they have full access to all data passing through them.
This means that even if a user trusts their AI provider, the infrastructure in between may not be secure. The study highlights the need for increased security measures to protect against these types of attacks, particularly as the use of AI agents in crypto transactions becomes more widespread. Industry leaders, including Coinbase founder Brian Armstrong and Binance founder Changpeng Zhao, have predicted that AI agents will play a major role in the future of cryptocurrency, but the study suggests that the underlying infrastructure is not yet secure enough to support this growth.