Connect with us
DAPA Banner

Crypto World

Researchers Warn Malicious AI Agent Routers Could Become a New Crypto Theft Vector

Published

on

Researchers Warn Malicious AI Agent Routers Could Become a New Crypto Theft Vector

University of California researchers have identified a new class of infrastructure-level attack capable of draining crypto wallets and injecting malicious code into developer environments – and this crypto theft already happened in the wild.

A systematic study published on arXiv on April 8, 2026, titled “Measuring Malicious Intermediary Attacks on the LLM Supply Chain,” tested 428 AI API routers and found that 9 actively injected malicious code, 17 accessed researcher AWS credentials, and at least one free router successfully drained ETH from a researcher-controlled private key.

The attack surface is the AI agent routing layer – infrastructure that has expanded rapidly as AI agents become embedded in blockchain execution workflows. The question is no longer whether this threat is theoretical. The question is how many compromised routers are already handling live user sessions.

Key Takeaways:
Advertisement
  • Scale of testing: Researchers tested 428 routers – 28 paid (sourced from Taobao, Xianyu, Shopify) and 400 free from public communities – using decoy AWS Canary credentials and encrypted crypto private keys.
  • Confirmed malicious activity: 9 routers injected malicious code, 17 accessed AWS credentials, and 1 free router drained ETH from a researcher-owned wallet.
  • Evasion sophistication: 2 routers deployed adaptive evasion, including waiting 50 API calls before activating and specifically targeting YOLO-mode autonomous sessions.
  • Attack mechanism: Routers operate as application-layer proxies with plaintext JSON access – no encryption standard governs what they can read or modify in transit.
  • Poisoning reach: Leaked OpenAI keys processed 2.1 billion tokens, exposing 99 credentials across 440 Codex sessions and 401 autonomous YOLO-mode sessions.
  • Recommended defenses: Researchers urge client-side fault-closure gates, response anomaly filtering, append-only audit logging, and cryptographic signing for verifiable LLM responses.

Discover: Top Crypto Presales to Watch This Month

How Malicious AI Agent Routers Actually Work – Plaintext Proxies, Not Encrypted Pipes

Standard LLM API infrastructure was designed for simple request-response relay: a client sends a prompt, the router forwards it to the model provider, the response comes back.

Malicious routers exploit exactly that trust model – they sit as application-layer proxies in the middle of that exchange, with full read-write access to plaintext JSON payloads passing through them in both directions.

There are no encryption standards governing what a router can inspect or modify in transit. A malicious router sees the raw prompt, the model response, and everything embedded in either – including private keys, API credentials, wallet seed phrases, or code being generated for a live deployment environment.

It can alter the response before it reaches the user, inject additional code into a code-generation output, or silently exfiltrate credentials to an external endpoint.

Advertisement

The UC researchers built an agent they called “Mine” to simulate four distinct attack types against public frameworks, specifically targeting autonomous YOLO-mode sessions where the agent executes actions without human confirmation at each step.

Two of the 428 routers tested deployed adaptive evasion – one waited 50 API calls before activating malicious behavior, specifically to avoid detection during initial testing. That’s not a blunt credential-scraper. That’s a targeted tool built to survive scrutiny.

The poisoning attack vector compounds the risk further. When leaked OpenAI API keys are processed through compromised routing infrastructure, the blast radius scales fast – 2.1 billion tokens processed, 99 credentials exposed across 440 Codex sessions in the researchers’ controlled test environment alone.

Discover: The best crypto to diversify your portfolio with

Advertisement

Who Is Actually Exposed – and Why Existing Defenses Don’t Reach This Layer of Crypto Theft

The problem is not that third-party API routers exist. The problem is that the entire trust model for AI agent infrastructure assumes the routing layer is neutral – and no enforcement mechanism currently verifies that assumption at scale.

Developers building onchain tools, DeFi automation scripts, and autonomous trading agents route API calls through third-party infrastructure constantly.

Free routers sourced from public communities – the category where 8 of the 9 malicious injectors were found, are widely used precisely because they lower the cost of building LLM-powered applications. As automated execution infrastructure in DeFi grows more dependent on external data and agent coordination, the routing layer becomes an increasingly attractive target.

Advertisement

Existing wallet security – hardware devices, multisig setups, offline key storage – does not protect against a router that intercepts a private key before it reaches the signing layer, or that injects malicious code into a deployment script that later executes onchain.

Source Chainalysis

Annual crypto theft losses already hit $1.4 billion. This attack vector doesn’t require breaking cryptography. It requires compromising a piece of middleware that most users never examine.

YOLO-mode autonomous sessions are the highest-risk exposure point. When an agent executes multi-step transactions without human confirmation checkpoints, a malicious router has a wider window to act – and the user has no interstitial moment to catch anomalous behavior.

Solayer founder @Fried_rice amplified the findings on X on April 10, 2026, describing the situation as “third-party API routers widely relied on by large language model agents” carrying “systemic security vulnerabilities” – a characterization that landed hard given the scale of autonomous agent adoption across DeFi tooling.

The researchers’ recommended defenses are client-side: fault-closure gates that halt execution when anomalous responses are detected, response anomaly filtering, and append-only logging for audit trails that can’t be tampered with by the router itself. Longer term, the UC team is advocating for cryptographic signing standards that would make LLM responses verifiable – the same architectural principle that makes onchain oracle integrity a live design requirement rather than an afterthought.

Discover: The best pre-launch token sales

The post Researchers Warn Malicious AI Agent Routers Could Become a New Crypto Theft Vector appeared first on Cryptonews.

Advertisement

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Oil Price Slides Below $100 as China Defies US Hormuz Blockade

Published

on

Crude (WTI) Price Performance

US oil prices fell back below $100 per barrel on Monday after a volatile session, reversing gains that pushed crude above $104 earlier in the day.

The sharp pullback came as China’s Defense Minister Admiral Dong Jun signaled that Chinese vessels would continue transiting the Strait of Hormuz under existing agreements with Iran.

China Challenges US Naval Blockade

Admiral Dong Jun delivered a pointed message to the Trump administration and the US Navy. He confirmed that Chinese ships are actively moving through the Strait of Hormuz and that Beijing will honor its trade and energy agreements with Tehran.

“Iran controls the Strait of Hormuz and it is open for us,” the Hormuz Letter reported, citing Admiral Dong Jun.

The statement reframes the standoff. What began as a bilateral US-Iran confrontation now involves a direct challenge from the world’s second-largest economy.

Advertisement

Analysts noted the repricing in oil markets reflects traders reassessing the blockade’s effectiveness now that China has entered the frame.

Notably, the US blockade of Iran affects China’s interests, as China is Iran’s largest oil export destination.

Trump Sets New April 27 Deadline

Speaking from the Oval Office, President Trump issued a fresh two-week ultimatum to Iran. He warned the situation “won’t be pleasant” if Tehran fails to reach a deal by April 27.

Advertisement

The deadline follows the collapse of US-Iran talks in Islamabad on April 12, which prompted Washington to declare a full naval blockade of the strait.

Brent crude had jumped more than 8% to above $103 following that announcement before reversing.

Crude (WTI) Price Performance
Crude (WTI) Price Performance. Source: TradingView

Markets now face a new variable. China’s willingness to test the blockade could determine whether oil stabilizes or enters another leg higher as the April 27 deadline approaches.

However, reports suggest that a tanker bound for China forced to turn back under the U.S. blockade.

Advertisement

“I believe the US intends to use this opportunity to pressure China to help urge Iran to reach an agreement, although this action is not specifically targeted at China,” one user commented.

The post Oil Price Slides Below $100 as China Defies US Hormuz Blockade appeared first on BeInCrypto.

Source link

Advertisement
Continue Reading

Crypto World

White House crypto adviser Witt says other Clarity Act hurdles being cleared

Published

on

White House crypto adviser Witt says other Clarity Act hurdles being cleared

The White House’s main crypto adviser, Patrick Witt, said that work is still being done to lock in the compromise that he thinks will move the Digital Asset Market Clarity Act forward in the U.S. Senate, though he said several other points are also being worked out behind the scenes.

In an interview on CoinDesk TV Monday, the executive director of the President’s Council of Advisors for Digital Assets suggested Monday that the common ground that key senators from both parties said they’d secured on stablecoin yield seems to be intact.”We’re hopeful that the compromise that has been reached will be durable and will hold,” Witt said. “Solving that was a must-have before we could get onto the other outstanding issues,” which he said he’s now pivoted to, though some of the issues have already been resolved.

Apart from the question of yield on stablecoins, over which bankers had successfully convinced some in the Senate that their deposit base could be in peril, the Clarity Act had a number of other potential hangups. Among those have been the illicit financial protections in the decentralized finance (DeFi) space, and a request from Democrats that senior government officials (most pointedly, President Donald Trump) be barred from profiting off of the crypto sector.

Though Witt wouldn’t identify the topics that have been settled in the ongoing talks, he said that the negotiations “made considerable progress in the background” while the yield argument between banks and crypto firms got most of the attention.

Advertisement

“We’re very close to closing them out,” he said. “All of these issues felt intractable and unsolvable at one point in time. So the fact that we’ve been able to close out a lot of them gives me confidence that we can close out these other ones, too.”

The Clarity Act would need a markup hearing in the Senate Banking Committee before it can be advanced toward a final Senate vote. It had been close to such a hearing at the beginning of the year, but the bank lobbyists raised objections to stablecoin yield that delayed the process.

Last week, White House economists issued a report that downplayed the threats the banking sector contended are posed by giving stablecoin holders a return that resembles interest from a bank account. On Monday, the American Bankers Association answered back, saying the White House argument was flawed. Witt said the view of bankers is wide-ranging, depending on how close they are to the technology.

“They’re grappling with it,” he said. “These are all important issues to their members.

Advertisement

And, you know, some of them are going to view stablecoins more positively. Some are going to be a little bit more threatened by them.”

Read More: Trump’s crypto adviser rejects Jamie Dimon on treating yield-bearing stablecoins like banks

Source link

Advertisement
Continue Reading

Crypto World

Bitcoin Price Prediction: BTC Needs All Year for $120,000 but $750 in This Presale Could Return $225,000 From One Listing

Published

on

Bitcoin Price Prediction: BTC Needs All Year for $120,000 but $750 in This Presale Could Return $225,000 From One Listing

The bitcoin price prediction just hit a turning point. BTC posted back to back quarterly losses for the first time since 2022, dropping 23% from its January price of $87,500, but April has closed green 9 out of 13 times since 2013 with a 69% win rate per 24/7 Wall St.

The pattern is clear: BTC falls hard then bounces harder. While that recovery builds over months from a $1.3 trillion cap, the wallets chasing the biggest return are not waiting on BTC.

They are filling Pepeto because a working exchange, a confirmed Binance listing, and $8.9 million in committed capital tell them the setup is already in place.

Bitcoin Price Prediction Shifts as April Win Rate Meets Quarterly Reset

BTC lost 23% in Q1 after falling from $87,500, and Q4 2025 also closed red, marking the first back to back quarterly losses since 2022 per 24/7 Wall St.

Advertisement

But April’s 69% win rate is one of BTC’s strongest months on record, and CME FedWatch shows 98% expect the Fed to hold at the April 28 meeting per 24/7 Wall St.

When BTC falls to levels that historically trigger rebounds and the Fed removes the threat of more rate hikes, the bitcoin price prediction shifts from fear to timing.

BTC at $71,140 and Pepeto at $8.9M: Where the Pattern Repeats

Pepeto: The Same Pattern That Made Every Early Crypto Fortune

What if you could go back and buy BTC at $100? Or catch BNB at $0.15? Or enter Pepe before $11 billion? Every one of those followed the same pattern: a real product, early fear, and a crowd that showed up late. Pepeto is following that exact pattern right now, except this time you are not late.

The exchange is already live. PepetoSwap handles every trade at zero cost so your gains stay whole, the bridge sends your assets between ETH, BNB, and Solana chains for free, and the scanner catches dangerous contracts before your money goes anywhere near them.

Advertisement

The mind behind the original Pepe, the meme token that hit $11 billion on nothing but hype and 420 trillion supply, built Pepeto with real tools and a Binance listing already confirmed. SolidProof audited every contract with results on chain for anyone to check. More than $8.9 million flowed in while the market sat in fear, and that is the tell. The people inside are not waiting and hoping. They already see where this goes. Staking pays 185% APY, growing your position every day before listing day arrives.

At $0.0000001862 per token, analysts project 100x to 300x once the Binance listing opens trading. Let those numbers sink in. $750 at 100x becomes $75,000. At 300x that same $750 becomes $225,000. How often does a setup like this land in front of you with a working exchange, a clean audit, and a confirmed listing all at less than a penny? The presale is filling fast and the listing will end this price for good.

Bitcoin Price Prediction: Levels, Targets, and What the Quarterly Reset Means

BTC trades near $71,140 with a $1.42 trillion cap, down 43% from its October 2025 all time high near $126,000 per CoinMarketCap.

The $75,000 level is the key resistance, and a clean break with volume opens the path toward $85,000 by summer.

Advertisement

Standard Chartered targets $120,000 by year end, and the CLARITY Act markup in late April is the next catalyst. Even the bull case at $120,000 delivers 67% from current levels, strong for a $1.3 trillion asset but taking the rest of the year to play out.

Conclusion

BTC carries the store of value story and April’s 69% win rate says the bounce is likely coming. But here is what it comes down to. Do you want 67% over the rest of the year from a $1.3 trillion token? Or do you want to be the person who put $750 into a presale and watched it become $75,000 to $225,000 from one listing?

Every fortune built in crypto started with one moment where someone moved while everyone else was still reading about it. BTC at $100. BNB at $0.15. Pepe at zero. The same creator who built that last one is behind Pepeto, and the Binance listing is the event that turns this presale price into history. The wallets already inside are the ones who will tell this story next year. The only question left is whether your wallet is one of them.

Click To Visit Pepeto Website To Enter The Presale

FAQs

How do back to back quarterly losses change the bitcoin price prediction?

Advertisement

BTC’s first back to back quarterly losses since 2022 pushed prices lower, but April’s 69% win rate signals a bounce, while Pepeto at presale pricing delivers returns one listing can produce.

Can a presale outperform the bitcoin price prediction this cycle?

BTC at $71,140 targeting $120,000 delivers 67% over months, but $750 inside Pepeto at 100x becomes $75,000 from one Binance listing, making the presale at the Pepeto official website the faster path.


Disclaimer: This is a Press Release provided by a third party who is responsible for the content. Please conduct your own research before taking any action based on the content.

Advertisement

Source link

Continue Reading

Crypto World

The SEC Conditionalises DeFi Platforms to Be Avoided for Broker Registration

Published

on

Crypto Breaking News

Scope of Interfaces to Be Covered

The Commission outlined covered user interfaces as websites, browser extensions, or applications associated with crypto wallets. These applications assist users to plan and start transactions on blockchain platforms or smart contracts. Also in the guidelines, there are platforms that provide routing information, pricing and cost estimates of transactions. Such interfaces provide support to users that make use of self-custodial wallets to conduct crypto asset securities trades. They might also contain aggregators and swap platforms that show execution paths. As a result, the SEC acknowledges their functions in operations but does not differentiate them from the traditional intermediaries.

The SEC, however, added that it will not object to some platforms functioning without registration of a broker-dealer in some circumstances. The platforms should enable users to customise the parameters of transactions and offer educational aids to make informed choices. In addition, they should not give instructions to the users on certain securities transactions. The Commission highlighted that platforms should be neutral when offering trading options. The interface providers can provide default execution facilities, but they are not able to rank or favor specific trades. Therefore, it requires compliance by ensuring that the user is in control and restricting access to the results of transactions.

Section 15 of the Exchange Act that regulates the registration of brokers is referred to as the guidance. Though certain interfaces might fit the definition of brokers, the SEC made it clear that there are situations in which the enforcement might not be applicable. Moreover, such a strategy is an indication of a loose reading of the law on securities. The research head of Galaxy Digital Alex Thorn claimed that the SEC is moving forward with market structure without legislation. He observed that the agency is developing rules that resemble the ones suggested in the CLARITY Act. Furthermore, he emphasised the fact that the guidance provided to the staff might change with time.

Also, the guidance can facilitate future exemption of innovation covered by the SEC leadership. This may go as far as tokenised securities trading via automated systems and decentralised applications. The agency therefore keeps on demarcating operational limits of new crypto services. The crypto regulation debate in the U.S. Senate is set to be reintroduced in the near future. The legislators can proceed with official reviews and amendments of the suggested bill. The schedule indicates that there will be ongoing liaison between regulatory and legislative action.

Advertisement

Risk & affiliate notice: Crypto assets are volatile and capital is at risk. This article may contain affiliate links. Read full disclosure

Source link

Advertisement
Continue Reading

Crypto World

U.S. SEC says software allowing crypto wallet transactions not considered broker

Published

on

U.S. SEC says software allowing crypto wallet transactions not considered broker

The U.S. Securities and Exchange Commission said that software that sets up user interfaces allowing crypto securities to be transacted through individuals’ wallets won’t need to be registered and regulated as a broker.

In the latest of the agency’s staff statements on crypto — now a wide-ranging list of views meant to allow the crypto industry to move forward in the absence of permanent rules — the SEC staff said on Monday that the websites or software used by people pursuing securities transactions with their self-hosted wallets won’t itself be considered as belonging to the broker-dealer category. That tracks with the agency’s recent stance that developers should be able to write software without triggering such regulations.

The agency provided a checklist of measures the creators of these interfaces can take to keep them out of the regulatory box, including that it “does not solicit investors to engage in any specific crypto asset securities transactions” and “does not provide commentary on any potential execution route(s) displayed to a user.”

If the interface offers financing, provides investment recommendations, handles user assets, takes orders or executes transactions, it’s no longer outside the agency’s regulatory reach.

Advertisement

“The staff is providing its views as an interim step while the commission continues to consider various regulatory issues relating to crypto asset securities activities and the feedback it has received,” the document said.

Under the administration of President Donald Trump, who has demanded that his executive branch clear an easier path for the rise of friendly crypto regulation, the leadership of the SEC has reversed previous resistance and embraced the technology. Even before the arrival of SEC Chairman Paul Atkins, a series of pro-crypto statements began emerging, clarifying the regulator’s new view that various assets wouldn’t be considered securities or wouldn’t trigger oversight requirements. But these statements don’t carry the weight and greater permanence of full-fledged rules.

In the meantime, Atkins’ agency is working on such rules. Wide-ranging SEC rules are close to the proposal stage at the agency, he’s said. Even as the Senate continues to work on the Clarity Act that would cement crypto regulations into law, the agency is working on interim measures to give the agency great certainty.

Read More: SEC makes quiet shift to brokers’ stablecoin holdings that may pack big results

Advertisement

Source link

Continue Reading

Crypto World

Crypto-Aligned Super PAC Begins to Endorse Candidates for US Midterms

Published

on

Politics, Funding, Elections, Tether

Fellowship, a super political action committee (PAC) that claims to have $100 million in its war chest from crypto-aligned parties ahead of the 2026 US midterms, has begun reporting spending and endorsements for the next election.

According to a filing with the Federal Election Commission (FEC), the Fellowship PAC reported spending $300,000 on advertising for Clay Fuller, a Republican who won a special election for Georgia’s 14th Congressional District to replace resigning congresswoman Marjorie Taylor Greene. The spending, reported disbursed on Tuesday, comes about a month before Georgia’s Republican primary on May 19.

Politics, Funding, Elections, Tether
Source: Federal Election Commission

Fellowship is just one of several crypto-backed or aligned PACs expected to pour money to support or oppose candidates in another critical US election season. In 2024, the Fairshake PAC spent more than $130 million in media buys in congressional races, possibly influencing the outcomes in key battlegrounds like the US Senate seat for Ohio.

According to the FEC, super PACs may “receive unlimited contributions from individuals, corporations, labor unions and other PACs for the purpose of financing independent expenditures and other independent political activity.”

In addition to its only reported expenditure since the Fellowship PAC’s statement of organization filed in 2025, Fellowship posted endorsements for candidates to its X account on Thursday, signaling support for Republicans in races across five states. The candidates included Alan Wilson for South Carolina governor, Blake Miguez for Louisiana’s 5th Congressional District, Mike Collins for the US Senate in Georgia, Julia Letlow for the US Senate in Louisiana, Pete Ricketts for the US Senate in Nebraska and Nate Morris for the US Senate in Kentucky.

Advertisement

Related: Chainlink and Anchorage Digital back launch of crypto-aligned PAC

Fellowship announced its launch in September, claiming to have “over $100 million” from undisclosed backers aligned with the crypto industry. On April 1, it said that Tether’s head of government affairs, Jesse Spiro, would chair the PAC, signaling support for candidates with pro-crypto views.

US lawmakers are still stalled on crypto market structure bill as midterms approach

The CLARITY Act, legislation passed by the US House of Representatives in July, has faced several delays in the Senate with no clear path forward on passing the legislation as of Monday.

Reports over the weekend signaled that the Senate Banking Committee, one of the two bodies needed to approve the bill in the chamber before a vote, was planning to hold a markup on the legislation, but the event was not on the committee’s calendar at the time of publication.

Advertisement

The bill, expected to be one of the most comprehensive pieces of legislation affecting the crypto and banking industries, has faced pushback from lawmakers to address ethics, stablecoin yield, tokenized equities and other potential issues.

Magazine: Should users be allowed to bet on war and death in prediction markets?