The crypto industry is on the cusp of a revolution where AI agents handle various tasks, including payments and transactions. However, a new study reveals that the underlying infrastructure may be insecure. According to McKinsey, AI agents could facilitate $3 trillion to $5 trillion in global consumer commerce by 2030.
Coinbase founder Brian Armstrong predicts that AI agents will soon outnumber humans in making online transactions, with Binance founder Changpeng Zhao forecasting a significant increase in AI-driven crypto payments. A group of researchers from the University of California, Santa Barbara, the University of California, San Diego, Fuzzland, and World Liberty Financial has identified a vulnerability in the AI infrastructure.
They found that LLM routers, which act as intermediaries between users and AI models, can be exploited by malicious actors to steal sensitive data, including credentials and private keys. These routers have unrestricted access to user data, making them a prime target for attacks.
The researchers warn that users are often unaware that their requests are being routed through these intermediary services, which can modify or steal their data. In one instance, a test Ethereum wallet was drained after its private key was exposed.
The researchers demonstrated how a single malicious router can compromise an entire system, highlighting a weakest-link problem. This vulnerability poses a significant risk to crypto users, as private keys, API credentials, and wallet access tokens are often transmitted in plain text.
The researchers found that multiple routers were secretly injecting malicious code and stealing credentials, with one incident resulting in a $500,000 wallet drain. The team also showed how easily the attack can be expanded by poisoning parts of the router ecosystem, allowing them to observe and control hundreds of downstream systems within hours. The study underscores the need for increased security measures to protect users from these vulnerabilities, particularly as AI agents become more prevalent in the crypto industry.