Be careful with AI and crypto together

bartosimpsonio · Oct 11, 2026

So I'm gladly watching my agents do its thing when suddenly it was in my crypto folder. I had it clean up some files but then it opened my crypto secrets and peeked in. Now my agent knows too much and I had to recreate my wallet

Then I realized crypto is irreversible. If the agent messes up, you can't undo it. I'm sure there was no foul play, just an accident, but you should probably keep your AI agent machine or virtual machine separate from your crypto. Lesson learned!

secondpage · Oct 11, 2026

this is why i run agents in a throwaway vm with only the folders they need mounted. seed phrases live on a hardware wallet, never in plain files. did your agent have full home dir access?

carlthecrawl · Oct 11, 2026

bartosimpsonio said:
it opened my crypto secrets and peeked in.

Your first (and maybe your last) mistake : You saved your secret in your Laptop

TheReviewer · Oct 11, 2026

i see so many people in reddit losing there funds these last days, hard to not become paranoïak.

proxymw · Oct 11, 2026

Wait, so if you have your wallet on your PC and have your AI open, could it be at risk?
Could you explain more about this? I am actually concerned because I use AI a lot, and I have my Claude AI with full access to my PC. Who exactly would steal the funds?

mesvitel · Oct 11, 2026

You shouldn’t really save your pkeys of seedphrases on your main system anyway, or digitally at all for that matter. Best/safest way is to write it down on a piece of paper.

Nikolaos · Oct 11, 2026

bartosimpsonio said:
So I'm gladly watching my agents do its thing when suddenly it was in my crypto folder. I had it clean up some files but then it opened my crypto secrets and peeked in. Now my agent knows too much and I had to recreate my wallet

Then I realized crypto is irreversible. If the agent messes up, you can't undo it. I'm sure there was no foul play, just an accident, but you should probably keep your AI agent machine or virtual machine separate from your crypto. Lesson learned!

How much did you loose? Sorry for your loss.

cmqwer0 · Oct 11, 2026

Create a VM or buy a windows vps, never use it on your pc where you have important info. I've seen it snoop around on my remote desktop and gather information without my full permission, maybe it asked me some vague question like can I access X and it meant probably much more than it wrote lol. Easy to give it access as it is very boring and unproductive to check every little thing agents require, hence why a remote desktop is great as it can only screw up fresh windows install and can steal nothing.

bartosimpsonio · Monday at 1:54 AM

secondpage said:
this is why i run agents in a throwaway vm with only the folders they need mounted. seed phrases live on a hardware wallet, never in plain files. did your agent have full home dir access?

Good moves. Yeah the agent was basically same as my user, it could do anything I could

carlthecrawl said:
Your first (and maybe your last) mistake : You saved your secret in your Laptop

True. Lesson learned

proxymw said:
Wait, so if you have your wallet on your PC and have your AI open, could it be at risk?
Could you explain more about this? I am actually concerned because I use AI a lot, and I have my Claude AI with full access to my PC. Who exactly would steal the funds?

Agent can do anything you can. If you can move funds, so can it.

Nikolaos said:
How much did you loose? Sorry for your loss.

Didn't lose anything fortunately! Noticed my fuckup before it was too late

Somers · Monday at 11:32 AM

That was a close call. Glad you dodged a bullet there.

People, please stop running agents in no-permission mode directly on your host machines. Always sandbox them.

This is exactly why I use my own client that runs Claude inside Docker. It's like Claude Desktop, but plays nice with Docker.

These are non-deterministic tools - you can never trust them with your data. You just never know.

bartosimpsonio · Tuesday at 1:26 PM

Somers said:
That was a close call. Glad you dodged a bullet there.

People, please stop running agents in no-permission mode directly on your host machines. Always sandbox them.

This is exactly why I use my own client that runs Claude inside Docker. It's like Claude Desktop, but plays nice with Docker.

These are non-deterministic tools - you can never trust them with your data. You just never know.

They do have erratic behavior sometimes. When the context begins to build up and they get "cozy" it gets a little weird.

The agent read one of my production databases once. It found the credentials and ran a query which could've had some sensible customer data.

Always sandbox these critters

maks23092004 · Tuesday at 1:55 PM

carlthecrawl said:
Your first (and maybe your last) mistake : You saved your secret in your Laptop

I agree. You shouldn't keep this kind of information only on your laptop. I'd recommend storing your seed phrase in at least two separate places. Personally, I write it down on paper and keep the copies in different location.

Be careful with AI and crypto together

bartosimpsonio

Elite Member

secondpage

Newbie

carlthecrawl

Registered Member

TheReviewer

Senior Member

proxymw

Registered Member

mesvitel

BANNED

Nikolaos

Elite Member

cmqwer0

Senior Member

bartosimpsonio

Elite Member

Somers

Registered Member

bartosimpsonio

Elite Member

maks23092004

Newbie

Main Menu

Marketplace

Making Money

BlackHat World