The rapid adoption of AI agents in the cryptocurrency industry, predicted to handle trillions of dollars in consumer commerce by 2030, may be hindered by a previously overlooked security flaw. Researchers from the University of California and other institutions have identified a weakness in the infrastructure supporting AI models, which could allow malicious actors to intercept sensitive data and drain crypto wallets.
The vulnerability lies in 'LLM routers,' services that connect users to AI models, but also have access to all data passing through them. These routers can be exploited to steal credentials, including private keys and API credentials, and have already been linked to a $500,000 wallet drain.
The researchers warn that a single malicious router can compromise an entire system, and that the lack of security guarantees in the underlying infrastructure poses a significant risk to the growing use of AI agents in crypto transactions.