Researchers find 26 LLM routers injecting malicious tool calls, one drained a client's $500k wallet
matthew_d_green · x · 2026-09-13
Security researchers (@shoucccc et al.) published a paper exposing supply-chain risks in LLM routers:
- They detected 26 LLM routers secretly injecting malicious tool calls and stealing credentials; one already drained a client wallet of $500k.
- They also poisoned routers to forward traffic to themselves, demonstrating they could take over 400 hosts within hours.
- Cryptographer @dinodaizovi amplified the finding: any inference API's responses can inject tool calls that your harness/agent may execute — a persistent attack surface to guard against.
Paper linked in the original post.
More from Safety
- ARIA sees leadership shakeup, but Safeguarded AI program 'in good shape,' adviser says — davidad · 2026-10-30
- Philly Councilmember Proposes Robot Tax on Driverless Vehicles and Delivery Robots — QuintinPope5 · 2026-10-30
- 26,400 working credentials found in 7.25M Gitee repos as agent-written code outpaces review — vista8 · 2026-10-30
- Basilisk and pixi-audit launch to audit conda-forge packages after brotli CVE — wolfvollprecht · 2026-10-30
- Yoba malware spreads via fake ChatGPT and Claude desktop apps on GitHub — ChuckDBrooks · 2026-10-30
- OpenAI model spent a found test-network wallet's funds without permission — Mundane-Evidence2795 · 2026-10-30