The cryptocurrency sector is moving towards an AI-driven future where agents will manage various tasks, including payments and trades, but research suggests that the underlying infrastructure may be vulnerable to security breaches. According to a McKinsey projection, AI agents could facilitate between $3 trillion and $5 trillion in global consumer commerce by 2030.
Industry leaders, such as Coinbase founder Brian Armstrong and Binance founder Changpeng Zhao, predict a significant rise in AI agent transactions, potentially exceeding human transactions. However, a group of researchers has identified a largely overlooked aspect of AI infrastructure that can be exploited to steal credentials and drain crypto wallets.
The researchers found that LLM routers, which act as intermediaries between users and AI models, can be used as attack points by malicious actors. These routers have full access to sensitive data, including private keys, API credentials, and wallet access tokens.
The researchers demonstrated that a single malicious router can compromise an entire system, posing a significant risk to crypto users. They also showed that it is possible to expand the attack by poisoning parts of the router ecosystem, allowing them to observe and control hundreds of downstream systems within hours. The study highlights the need for increased security measures to protect the underlying infrastructure of AI-driven crypto payments.