The cryptocurrency sector is rapidly moving towards a future where AI agents manage various tasks, including transactions and payments, but recent findings suggest that the underlying infrastructure may be insecure. A report by McKinsey predicts that AI agents could facilitate $3 trillion to $5 trillion in global consumer commerce by 2030.
However, a team of security researchers and academics has discovered a significant flaw in the AI infrastructure that could expose crypto wallets to theft. The researchers found that LLM routers, which act as intermediaries between users and AI models, can be used to steal sensitive data, including private keys and API credentials. This vulnerability has already been linked to a $500,000 wallet drain and the theft of credentials.
The researchers warn that the problem is no longer theoretical and that a single malicious router can compromise an entire system, highlighting a weakest-link problem in the infrastructure. As the use of AI agents in crypto payments becomes more widespread, the lack of security guarantees in the underlying infrastructure poses a significant risk to users.