The crypto industry is on the cusp of a revolution where AI agents manage various tasks, including payments and trades, but a recent study reveals that the underlying infrastructure may be insecure. According to a McKinsey projection, AI agents could facilitate $3 trillion to $5 trillion in global consumer commerce by 2030.
Coinbase founder Brian Armstrong predicts that AI agents will soon outnumber humans in making internet transactions, while Binance founder Changpeng Zhao forecasts that agents will make a million times more crypto payments than people. However, a team of security researchers has identified a critical vulnerability in a largely overlooked aspect of AI infrastructure, which has already been exploited to steal credentials and drain crypto wallets.
The researchers, affiliated with the University of California and other institutions, found that LLM routers, which act as intermediaries between users and AI models, can be used as a powerful attack point by malicious actors. These routers have full access to sensitive data, including private keys, API credentials, and wallet access tokens, which are often transmitted in plain text. The researchers demonstrated that a single malicious router can compromise an entire system, and they were able to trick services into forwarding traffic, allowing them to observe and control hundreds of downstream systems within hours.
The study highlights a weakest-link problem, where a single vulnerable router can compromise the entire system, even if the user trusts their AI provider. This creates a mismatch between the growing use of AI agents in crypto transactions and the lack of guarantees that the underlying infrastructure is secure.