The cryptocurrency sector is rapidly moving towards a future where AI-powered agents manage various tasks, including transactions and payments. However, recent research suggests that the underlying infrastructure may be insecure. According to a McKinsey projection, AI agents could facilitate $3 trillion to $5 trillion in global consumer commerce by 2030. Coinbase founder Brian Armstrong predicts that AI agents will soon outnumber humans in making internet transactions, with Binance founder Changpeng Zhao forecasting that agents will make significantly more payments than people, all in crypto.
A group of security academics and crypto researchers have released a paper highlighting that a largely overlooked aspect of AI infrastructure is being exploited to steal credentials and drain crypto wallets. The researchers, affiliated with the University of California, Santa Barbara, the University of California, San Diego, blockchain firm Fuzzland, and World Liberty Financial, found that LLM routers, which act as intermediaries between users and AI models, can be a powerful attack point for malicious actors. These routers have full access to sensitive data, including private keys, API credentials, and wallet access tokens, which are often transmitted in plain text.
The researchers demonstrated that a single malicious router can compromise an entire system, and by 'poisoning' parts of the router ecosystem, they were able to observe and potentially control hundreds of downstream systems within hours. This creates a significant risk for crypto users, as compromised credentials can be reused without the user's knowledge, and a single altered instruction can immediately compromise systems or funds. The study's findings suggest that the increasing reliance on AI agents in the crypto industry may be premature, given the lack of guarantees that the underlying infrastructure is secure.