Vitalik Buterin says AI agents still face big challenges in how they are designed. The main issues a
Vitalik: AI Agents + ENS Profiles = New Attack Surface—Manual Confirmation Helps, But UX Is Hard
Vitalik Buterin is thinking about the risks when AI agents start acting on our behalf. In a post on X, he flagged a subtle but scary scenario: what if your agent reads someone's ENS profile, and that profile contains a hidden jailbreak prompt? The agent could be tricked into transferring all your assets to them.
His take? Requiring manual confirmation for every large transaction is a lot better than nothing—but it's not perfect. And explaining exactly what the transaction does to users? That's a deep UX rabbit hole. Security, decentralization, privacy—holding all three while defending against AI-powered attacks is still an open problem.

|
DISCLAIMER:
1. All content on this website (including but not limited to articles, data, charts, and analyses) is for general informational purposes only and does not constitute any form of investment advice, trading recommendation, or financial guidance. 2. Cryptocurrencies and digital assets are subject to extreme price volatility and high investment risk; you may lose part or all of your principal. Past performance does not predict future results. 3. The information on this website is based on sources we believe to be reliable, but we do not guarantee its accuracy, completeness, or timeliness. Any investment decisions made based on this website’s information are at your own risk. 4. We strongly recommend that you conduct your own thorough research and consult an independent, licensed financial advisor before making any investment decisions. |








