Исследование выявило уязвимости безопасности в сторонних маршрутизаторах AI, что может привести к краже криптовалюты

Deep Tide TechFlow news, April 13, according to Cointelegraph, researchers at the University of California recently disclosed that some third-party AI large language model (LLM) routers pose security risks that could lead to cryptocurrency assets being stolen.

The study shows that LLM routers, acting as API intermediaries, can read plaintext information; some routers were found injecting malicious code and stealing credentials. The team tested 28 paid and 400 free routers, discovering that 9 routers actively injected malicious code, 2 deployed trigger evasion, 17 accessed Amazon Web Services credentials, and some routers even transferred ETH using researchers’ Ethereum private keys.

The research points out that malicious behavior in routers is difficult to detect, and some AI agent frameworks’ “YOLO mode” can automatically execute commands, increasing security risks. The study recommends developers not to transmit private keys or mnemonics through AI agents and calls on AI companies to encrypt and sign responses to enhance security.