Blog

AI agents in crypto wallets can be safe with proper safeguards



Agentic AI is likely to reshape how users interact with their crypto wallets in the future – especially in trading and payments. While AI and blockchain executives note that it can be secure, it also does not come without a new set of risks.

Last week, Crypto Exchange Coinbase announced its new tool, Payment MCP, which AI agents are provided Access to the same Onchain financial tools that people use.

When the tool is paired with an LLM like Claude, Gemini and Codex, they are allowed to Access crypto wallets and make payments autonomously, the coinbase developer platform said in a statement.

AI agents powered by MCP payments can pay, calculate, retrieve paywalled data, tip creators and manage several business operations through the X402 protocol, an open, web-native payment protocol that facilitates Instant StableCoin paymentsaccording to the Coinbase developer platform.

“This marks a new era of agent innovation where AI agents can act in the global economy,” Coinbase’s development platform said.

AI agent in crypto can be safe

Aaron Ratcliff, the properties lead at blockchain intelligence firm Merkle Science, told Cointelegraph that from a security standpoint, giving an AI agent access to your wallet adds a layer of trust to something designed to be untrustworthy.

It can be safe if the system is built correctly, but Ratcliff argued that “safety” ultimately depends on the user of the crypto.

“Safe use depends on users understanding how to prompt and on AI pulling blockchain data seamlessly. It also depends on trading credentials staying secure; if trading credentials leak, the damage writes itself.”

AI in your portfolio can add excessive security risks

An April survey of 2,632 crypto users from Crypto Data Aggregator Coingecko found that most users are comfortable with AI trading on their behalf; 87% said they would let AI agents Manage at least one tenth of their crypto portfolio.

Ratcliff says there are several security risks bad actors can be exploited if AI is used in one’s portfolio. Injecting a prompt or instruction may allow someone to hijack the system.

A man-in-the-middle attack, where the hacker inserts themselves between entities in a communication channel to steal data, can also redirect trades.

“AI can also deal with scam tokens, miss honeypots or rug-pulls, or handle slippage so users’ funds are badly burned,” Ratcliff added.

“I want proof that AI can catch front-running, apply slippage limits, scam tokens, and audit contracts in real time before it makes a trade. It should also sandbox signals, prevent injection, and block human access.”

At the same time, Ratcliff believes that compliance gaps can lead to issues, such as the absence of controls to prevent an AI from sending funds to a penal or an exchange.

Even if the AI ​​has protections, attention is still paid

Speaking to Cointelegraph, Sean Ren, co-founder of the AI-native blockchain platform Sahara AI, said that in the case of Coinbase, the exchange tool uses model context protocols, “Which is the gold standard for security when set up correctly.”