Why can crafted content my agent reads authorize my on-chain wallet to transfer funds?
机会
An AI agent with signing authority over a crypto wallet processes arbitrary external content as part of its task context: web pages, emails, documents, API responses. Nothing in today's signing infrastructure separates instruction sources from each other, so a page the agent is asked to summarize can embed hidden transfer instructions the agent interprets as a legitimate task and executes. Wallet standards like ERC-4337 session keys model the problem as what can this key do, not where did this instruction originate. No agent runtime today filters signing decisions by instruction provenance, which means a wallet authorized to move funds is exactly as safe as the most hostile document the agent will ever read.
为什么重要
Agents with on-chain keys are in production now, and every piece of content they process is a potential attack vector against the funds they control.
我如何评估机会
机会评分是我的个人判断，而非量化指标：痛苦程度、发生频率，以及当前解决方案的匮乏程度。分数越高，意味着我认为越值得去构建。
出现时造成的痛苦程度。
人们实际遇到它的频率。
当前针对它的优质工具有多匮乏。