Ethereum

would

<p>AI is advancing fast, sometimes too fast for security. Vitalik Buterin warns of a worrying drift: intelligent agents open new vulnerabilities still poorly controlled. In the face of this risk, he breaks with dominant practices and opts for a radical approach, based on local and compartmentalized AI. Behind this choice, a question arises: is innovation in artificial intelligence compromising recent gains in privacy and data control?</p>
<div class="in-brief">
 <div class="in-brief--container"><span></span><span></span>
  <h2 class="in-brief--title" id="in-brief">In brief</h2>
  <ul>
   <li>Vitalik Buterin warns of increasing risks related to artificial intelligence agents, notably their vulnerability to malicious instructions.</li>
   <li>A significant portion of AI agent modules would be compromised, exposing users to invisible attacks and leaks of sensitive data.</li>
   <li>The Ethereum co-founder questions current cloud-based models, deemed too permissive and insufficiently secure.</li>
   <li>He proposes an alternative architecture based on local, private, and compartmentalized AI to limit uncontrolled interactions.</li>
  </ul>
 </div>
</div>
<h2 id="an-underestimated-threat-in-ai-agents">An underestimated threat in AI agents</h2>
<p>Vitalik Buterin reveals a structural vulnerability in the <a href="https://www.cointribune.com/en/a-deepmind-study-highlights-six-major-vulnerabilities-of-ai-agents/" rel="noopener noreferrer nofollow">AI agents</a> ecosystem. Data from security company Hiddenlayer <a href="https://www.hiddenlayer.com/research/exploring-the-security-risks-of-ai-assistants-like-openclaw" rel="noopener noreferrer nofollow">indicate</a> that nearly 15 % of skills contain malicious instructions, a figure that raises questions about these tools’ reliability.</p>
<div class="my-4">
 <div class="ads "></div>
</div>
<p>Several elements <a href="https://news.bitcoin.com/ethereums-vitalik-buterin-warns-against-ai-agent-security-risks-shares-his-private-llm-stack/" rel="noopener noreferrer nofollow">concretely illustrate</a> this drift :</p>
<ul>
 <li>A significant proportion of agent modules integrating potentially hostile code ;</li>
 <li>The ability of a simple malicious web page to compromise an agent ;</li>
 <li>The case of Openclaw, where an agent can download and execute scripts without alerting the user ;</li>
 <li>The absence of robust control mechanisms in many AI environments.</li>
</ul>
<p>Buterin <a href="https://vitalik.eth.limo/general/2026/04/02/secure_llms.html" rel="noopener noreferrer nofollow">summarizes</a> this concern in unequivocal terms: <em>“I come from a deeply worried mindset (…) we are about to take ten steps back”</em>. This statement reflects a general fear: a regression in privacy.</p>
<p>Advances enabled by encryption and local software could be weakened by agents capable of accessing, processing, and transmitting sensitive data without sufficient supervision.</p>
<div class="affiliate-button"><a href="https://coinbase-consumer.sjv.io/qzm0Jq" rel="noopener noreferrer nofollow">Your 1st cryptos with Coinbase</a><a href="https://www.cointribune.com/en/sponsored-content/" rel="noopener noreferrer nofollow">This link uses an affiliate program.</a>
</div>
<h2 id="h-a-radical-architecture-for-a-sovereign-ai">A radical architecture for a sovereign AI</h2>
<p>In the face of these risks, Vitalik Buterin adopts a radical technical approach. He has abandoned cloud services to build a system he describes as <em>“sovereign/local/private/secure”</em>. His infrastructure relies on a locally executed model, combined with isolated environments via sandboxing tools. The goal is to drastically limit uncontrolled interactions with the outside while maintaining total control over the data.</p>
<p>At the heart of this system, Buterin introduces an unprecedented mechanism: the <em>“human + LLM 2-of-2”</em> model. Any outbound action toward a third party, whether it is a message or an interaction, requires joint validation from the human and the AI. This logic extends to crypto uses. He recommends capping automated transactions at 100 dollars per day, with mandatory validation beyond or in the presence of sensitive data. According to him, <em>“AI agents should never have unlimited access to wallets”</em>, a position that redefines security standards for blockchain-connected tools.</p>
<p>To complement this system, Buterin explores alternatives to classic remote inference. He mentions using technologies such as mixnets or secure execution environments to reduce data leaks. He also cites initiatives like ZK-API, while acknowledging that some advanced solutions, such as fully homomorphic encryption, remain too slow for practical use.</p>
<p>The approach advocated by Vitalik Buterin outlines a possible evolution of AI toward more sovereign and compartmentalized models. It simultaneously raises complex trade-offs between performance, accessibility, and security. In the crypto ecosystem, where <a href="https://www.cointribune.com/en/ai-micropayments-emerge-as-infrastructure-evolves/" rel="noopener noreferrer nofollow">automation and intelligent agents are gaining ground</a>, these choices could influence the design of future wallets and protocols. This stance does not close the debate; it shifts it toward a central question: how far to delegate control to artificial intelligence without compromising user security.</p>

Buterin Criticizes Flaws In AI Agent Systems

Table of Contents

Cointribune EN

Other articles published on Apr 5, 2026

Join our free newsletter for daily crypto updates!