The cryptocurrency sector is rapidly adopting AI agents to manage various tasks, including payments and transactions. However, recent research reveals that the underlying infrastructure may be insecure.
According to a McKinsey projection, AI agents could facilitate $3 trillion to $5 trillion in global consumer commerce by 2030. Coinbase founder Brian Armstrong predicts that AI agents will soon outnumber humans in making internet transactions, with Binance founder Changpeng Zhao forecasting that agents will make a million times more crypto payments than people.
Nevertheless, a group of security academics and crypto researchers have discovered a significant vulnerability in the AI infrastructure. The researchers, affiliated with the University of California, Santa Barbara, the University of California, San Diego, blockchain firm Fuzzland, and World Liberty Financial, found that 'LLM routers' or services that connect users to AI models can be exploited by malicious actors.
These routers have full access to sensitive data, including private keys, API credentials, and wallet access tokens, which can be stolen or modified. The researchers demonstrated that a single malicious router can compromise the entire system, emphasizing a weakest-link problem. They also showed that it is possible to 'poison' parts of the router ecosystem, allowing them to observe and control hundreds of downstream systems within hours.
The implications for crypto users are severe, as exposed credentials can be copied and reused without the user's knowledge. The researchers warn that the increasing adoption of AI agents in crypto transactions may create a mismatch between the trusted AI providers and the untrustworthy infrastructure, highlighting the need for guarantees that outputs haven't been tampered with.