This article provides a comprehensive analysis of how AI agents are reshaping on-chain security, starting with the Grok/Bankr incident that exposed trust vulnerabilities between automated systems. It details eight major attack surfaces including prompt injection, blind signing, memory poisoning, privilege escalation, autonomous authorization risks, supply chain attacks, x402 payment layer attacks, and AI-powered social engineering. The report surveys existing defensive solutions from Cobo, Fystack, Thirdweb, Coinbase/OKX/Binance, GoPlus/SlowMist, and KYA/ERC-8004, and proposes six security principles. It argues that security will be the most deterministic industrial opportunity in the agent economy, determining whether AI can truly enter the financial execution layer.

本文由外捕研究与慢雾科技联合出品，系统梳理 AI Agent 进入 Web3 后带来的链上安全范式转变。通过分析 Grok/Bankr 事件、PocketOS 数据库删除、LiteLLM 供应链攻击等真实案例，揭示提示词注入、盲签、记忆污染、权限穿透、供应链攻击及 x402 支付攻击六大新型攻击面。同时介绍 Cobo、Fystack、Thirdweb、Coinbase、GoPlus、SlowMist 等防御方案，并提炼六条安全设计原则，强调安全将成为 Agent 经济最确定的基础设施。

A joint research report by Web3Caff Research and SlowMist, analyzing the new on-chain security challenges as AI Agents enter Web3. Using real cases including Bankr/Grok Morse code attack, PocketOS database deletion, LiteLLM supply chain poisoning, and Vercel/Context.ai breach, the article reveals attack surfaces expanding from private key theft to a five-layer composite risk targeting model goals, memory, toolchains, wallet authorization, and payment paths. It categorizes defense solutions from Cobo, Fystack, Thirdweb, Coinbase, OKX, Binance, GoPlus, and SlowMist, and proposes six design principles—intent-execution separation, isolation, verifiable UI, toolchain governance, payment boundaries, and rapid incident response—to help projects build security infrastructure for the Agent era.

According to SoSoValue data, the crypto market sectors showed mixed performance. The AI sector rose 3.59% in 24 hours, with Worldcoin (WLD) surging 22%. The DeFi sector gained 1.93%, pushing Hyperliquid (HYPE) to a new all-time high. Meanwhile, Bitcoin fell 6.19%, briefly dropping below $62,000, and Ethereum slid below $1,800.

SoSoValue data shows a mixed day for crypto sectors. The AI sector rose 3.59% with Worldcoin jumping 22%, while DeFi climbed 1.93% as Hyperliquid hit a new all-time high. Meanwhile, Bitcoin tumbled 6.19%, briefly breaching $62,000, and Ethereum slid below $1,800.

On June 4, the crypto market saw a sharp divergence: the AI sector surged 3.59%, led by a 22% jump in Worldcoin, while DeFi also strengthened as Hyperliquid hit a new all-time high. In contrast, Bitcoin tumbled 6.19% and briefly fell below $62,000, dragging most L1 and L2 sectors lower.

On June 2, the bitcoin treasury company market showed divergence. Strategy sold 32 bitcoins for the first time in three years, while several companies continued to accumulate. Nakamoto's CEO increased his stake, and Sequans exited its crypto treasury. Ethereum treasury firm Bitmine's unrealized loss exceeded $8.1 billion, while SharpLink and Forward Industries were included in Russell indexes. Solana treasury company Sharps Technology rebranded to SkyAI, HypeStrat's floating profit topped $1 billion, Genius Group launched an AI treasury plan, and BNB Plus raised $4.1 million.

Bitcoin treasury companies are increasingly divergent, with Sean Bill criticizing hype-driven firms. Last week, public companies net purchased $9.85M in BTC, while Strategy made a rare sale of 32 BTC. Bitmine’s ETH stash swelled to 5.416M, with a floating loss exceeding $8.1B. Nakamoto’s CEO bought nearly $1M in shares; Sequans exited its BTC strategy to refocus on IoT; Cango reported Q1 mining revenue of $98.4M. SharpLink and Forward Industries are set to join Russell indexes. SkyAI rebranded for AI finance; HypeStrat’s unrealized profit topped $1B; Genius Group launched a $100M AI treasury.