As the cryptocurrency industry moves towards a future where AI agents handle various tasks, including payments and trades, a new study suggests that the underlying infrastructure may be insecure. According to a recent projection by McKinsey, AI agents could facilitate $3 trillion to $5 trillion in global consumer commerce by 2030. However, a group of security researchers has discovered that a largely overlooked component of AI infrastructure, known as LLM routers, can be exploited by malicious actors to steal credentials and drain crypto wallets. These routers, which sit between users and AI models, have full access to sensitive data and can act as a powerful attack point.
The researchers found that 26 LLM routers were secretly injecting malicious tool calls and stealing credentials, with one incident resulting in the draining of a $500,000 wallet. The study highlights the severe implications for crypto users, as private keys, API credentials, and wallet access tokens often pass through these systems in plain text. The researchers warn that a single malicious router in the chain can compromise the entire system, creating a cascading risk that could have far-reaching consequences for the cryptocurrency industry.