The rapid growth of the cryptocurrency industry is driving the adoption of AI agents to manage various transactions, but recent findings suggest that the underlying infrastructure may be insecure. According to a report by McKinsey, AI agents are expected to facilitate between $3 trillion and $5 trillion in global consumer commerce by 2030. Crypto industry leaders, such as Brian Armstrong and Changpeng Zhao, predict that AI agents will soon outnumber humans in making transactions on the internet, with a significant portion of these transactions being in crypto.
However, a team of security academics and crypto researchers has discovered a critical vulnerability in a largely overlooked component of AI infrastructure, which has already been exploited to steal credentials and drain crypto wallets. The researchers, affiliated with the University of California and other institutions, found that LLM routers, which act as intermediaries between users and AI models, can be used as a powerful attack point by malicious actors. These routers have full access to sensitive data, including private keys, API credentials, and wallet access tokens, which can be stolen or modified. The researchers demonstrated that a single malicious router can compromise an entire system, and they were able to observe and potentially control hundreds of downstream systems within hours.
This weakest-link problem creates a cascading risk, where even if a user trusts their AI provider, the infrastructure in between may not be trustworthy. As the crypto industry increasingly relies on AI agents, the lack of guarantees that outputs haven't been tampered with poses a significant security risk.