An agent was talked into sending $150,000 in Morse code
No exploit and no stolen key, just a message the model agreed to act on. Prompt injection is not a bug you patch, so what can a persuaded model express?
Read#ai-agents
5 posts
Why an AI agent should never hold a private key
A key grants unlimited authority, and every limit on top is software. A permission can be withdrawn, but a copied key cannot be un-copied.
ReadWhat is an agentic wallet?
A wallet an AI agent can spend from without asking you each time. The whole design question is what stops it, and the answers differ.
ReadAgentic wallets compared: where the limits actually live
Every one of them enforces spending limits. They differ in where the enforcement sits, and that decides what happens when the operator is wrong.
ReadAgentic wallet security: what actually goes wrong
The failure modes with evidence behind them, separated from the ones that only have a statistic. One widely quoted figure does not survive.
Read