AI agents become a major disaster zone for crypto assets, LLM routers exposed to large-scale data theft

ME News update: On April 13 (UTC+8), researchers from the University of California, together with Fuzzland and other organizations, released a study finding that LLM routers have become a fatal attack surface for crypto assets. The study found that 26 third-party AI router services secretly injected malicious calls and stole users’ credentials; in a single incident, $500k worth of crypto wallets were stolen. These intermediaries can read private keys and API keys in plaintext, and, through “pollution,” can control 400 hosts within hours. As AI agents may in the future mediate transactions and payments amounting to trillions of dollars—exceeding human capacity by millions—security infrastructure is severely lagging, and the “weakest link” could set off a cascading crisis. (Source: ODAILY)