The cryptocurrency sector is rapidly moving towards a future where AI-powered agents manage various transactions, including payments and trades. However, a new study suggests that the underlying infrastructure may be insecure. According to a McKinsey projection, AI agents could facilitate $3 trillion to $5 trillion in global consumer commerce by 2030.
Coinbase founder Brian Armstrong predicts that AI agents will soon outnumber humans in making internet transactions, with Binance founder Changpeng Zhao expecting agents to make millions of times more payments than people. A group of researchers from the University of California, Santa Barbara, the University of California, San Diego, and other institutions have identified a significant security vulnerability in the AI infrastructure. They found that LLM routers, which act as intermediaries between users and AI models, can be exploited by malicious actors to steal sensitive data, including credentials and wallet information.
These routers have full access to user data, including private keys, API credentials, and wallet access tokens, which can be used to drain wallets. The researchers demonstrated how a single malicious router can compromise an entire system, highlighting a weakest-link problem in the infrastructure. This creates a significant risk for crypto users, as industry leaders predict that AI agents will handle an increasing share of crypto activity, while the underlying infrastructure lacks guarantees that outputs haven't been tampered with.