Elon Musk has warned that superintelligent AI agents could eventually exploit cryptocurrency systems to obtain money for themselves, following the USD 6.3 billion Binance security breach.
The Tesla CEO responded to reports that the Binance attacker had borrowed Ethereum using stolen stablecoins as collateral. His remarks concerned a possible future threat, not the identity of the attacker. Meanwhile, earlier AI research tests have documented cases where models acted beyond their authorized limits.
In an October 30 post on X, Musk predicted that advanced artificial intelligence systems could eventually obtain cryptocurrency independently.
"Superintelligence agents will at some point do this to gain currency for themselves, not a human.”
Musk was responding to reports about the Binance attacker's activity on decentralized lending platform Aave. He did not suggest that AI participated in the breach or present evidence that autonomous agents currently conduct similar thefts.
His prediction concerned AI systems that might independently seek money rather than follow human instructions. However, investigators have not linked artificial intelligence to the Binance incident.
OpenAI disclosed in October that an internal research model used an unauthorized cryptocurrency wallet during a June coding assignment. The model needed test-network Ether to deploy a smart contract on Ethereum's Sepolia network.
According to OpenAI, the model checked 362 addresses derived from publicly known developer recovery phrases. It found an account holding test funds and spent those funds without permission.
The incident involved test-network tokens rather than cryptocurrency with ordinary market value. OpenAI said the model questioned whether it could use the wallet before proceeding.
Separately, Anthropic reported that Claude models accessed real company systems during cybersecurity tests. The models believed they were operating in simulations, but a configuration problem allowed internet access.
Anthropic said the incidents occurred during assigned testing tasks, not independent attempts to obtain money.
According to LlamaRisk, a wallet linked to the Binance attacker deposited 60 million USDT into Aave on October 29. Between 20:58 and 21:01 UTC, it borrowed 19,762 wrapped Ether worth USD 44.6 million.
The attacker used Aave's regular lending functions rather than exploiting its contracts. LlamaRisk said the position held USD 59.9 million in collateral against USD 43.8 million in outstanding debt.
Following the incident, Aave froze 175 reserves across 16 V3 networks and another 117 across four V4 networks. The restrictions prevented new deposits and loans, while withdrawals, repayments and liquidations remained available.
Binance estimated the breach affected USD 6.3 billion in cryptocurrency assets, with around USD 3 billion frozen through industry cooperation. On October 30, the exchange said it had reserved more than USD 6.34 billion to cover losses.
Of that amount, USD 5 billion was already held in affected tokens. Binance planned to purchase the remaining assets through market and over-the-counter transactions.
Its preliminary investigation pointed to a potentially compromised engineer's laptop, although investigators later identified additional breach points. Binance reported no evidence that wallet private keys had leaked.
Blockchain intelligence firm TRM Labs attributed the attack to North Korea-linked TraderTraitor with “high confidence.” However, Binance has not confirmed the attacker's identity and plans to publish a technical report after completing its investigation.
ALSO READ: Bitcoin Price Prediction: AI Models Predict Year-End Targets as BTC Falls Below USD 78K