Although the prompt injection vulnerability in a certain exchange's AgentKit has been addressed, its actual impact has been significantly underestimated.
According to a report from CriptoNoticias, an independent security researcher has disclosed a prompt injection vulnerability in a certain exchange's AgentKit, which allows attackers to induce the AI agent to execute unauthorized token transfers via malicious instructions, without requiring manual confirmation.
This vulnerability has been validated through actual transactions on the Base Sepolia testnet. Additionally, the researcher pointed out that the vulnerability also exposes the unlimited authorization process for ERC-20 tokens, as well as remote server access permissions within the same execution context of the agent, expanding the risk beyond merely having the wallet drained. However, the report did not specify which particular infrastructures might be affected.
The vulnerability was submitted to the exchange’s bug bounty program in February and was officially validated. It was ultimately classified as medium risk and awarded a $2,000 bounty. However, the researcher emphasized that the actual impact of the vulnerability is far greater than the official rating.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Pokémon card sales restriction triggers a "roller coaster": Japan's second-hand marketplace Mercari plunges before rebounding, Citigroup calls it "oversold"
A trading restriction on Pokémon cards has caused significant volatility in the share price of the Japanese online trading platform Mercari.
Middle East conflict pushes up inflation, ECB may "stand pat" until final rate hike in December
Due to rising oil and gas prices driven by Middle East conflicts and heightened inflation expectations, the European Central Bank may implement its final rate hike of this cycle in December.
UK retail sales unexpectedly increase by 0.5% in August, boosted by warm weather and improved consumer sentiment
Despite rising energy bills, UK retail sales unexpectedly grew in August, as warm weather and improved public sentiment boosted consumption.
Immunology drug development company Electra (ETRA.US) prices IPO at $15, raising $350 millions, to be listed on Nasdaq tonight
Clinical-stage immunology drug development company Electra Therapeutics Inc. raised $350 million in an upsized U.S. initial public offering (IPO), with the offering price set at the midpoint of the marketed range.
Crypto prices
More
