Although the prompt injection vulnerability in a certain exchange's AgentKit has been addressed, its actual impact has been significantly underestimated.
According to a report from CriptoNoticias, an independent security researcher has disclosed a prompt injection vulnerability in a certain exchange's AgentKit, which allows attackers to induce the AI agent to execute unauthorized token transfers via malicious instructions, without requiring manual confirmation.
This vulnerability has been validated through actual transactions on the Base Sepolia testnet. Additionally, the researcher pointed out that the vulnerability also exposes the unlimited authorization process for ERC-20 tokens, as well as remote server access permissions within the same execution context of the agent, expanding the risk beyond merely having the wallet drained. However, the report did not specify which particular infrastructures might be affected.
The vulnerability was submitted to the exchange’s bug bounty program in February and was officially validated. It was ultimately classified as medium risk and awarded a $2,000 bounty. However, the researcher emphasized that the actual impact of the vulnerability is far greater than the official rating.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Meta (META.US) data center's first high-yield bond is oversubscribed more than four times, strong demand drives premium issuance
The first junk bond issuance by the data center division of Meta Platforms attracted demand over four times the transaction size, with its enticing yields drawing in investors.
US stock index adjustments to take effect next Monday: Bloom Energy (BE.US) and Everpure (P.US) to be included in S&P 500, changes also for mid- and small-cap stocks
Bloom Energy, Illumina, and Everpure will be included in the S&P 500 index, while several other companies will be added to the S&P 100, S&P MidCap 400, and S&P SmallCap 600 indices.
Is the Federal Reserve repeating the 2022-style rate hikes? Bank of America warns: Rates may return above 5%, suggests shorting two-year U.S. Treasuries.
Bank of America warns: With Waller at the helm, the Federal Reserve may raise interest rates above 5%, potentially repeating the events of 2022.
Crypto prices
More
