Elon Musk has warned that superintelligent AI agents could eventually exploit cryptocurrency systems to obtain money for themselves, following reports that the Binance hacker used stolen stablecoins to borrow millions of dollars in Ethereum.
Summary
- Elon Musk warned that superintelligent AI agents could eventually exploit cryptocurrency systems to obtain money for themselves, following reports of a major Binance security breach.
- A wallet linked to the Binance attacker deposited 60 million USDT into Aave and borrowed approximately $44.6 million in wrapped Ether before the protocol introduced emergency restrictions.
- Musk did not suggest that artificial intelligence was involved in the Binance attack, but predicted that advanced AI agents could eventually carry out similar transactions independently.
- Aave froze hundreds of lending reserves across its V3 and V4 networks to prevent further borrowing activity, while existing loan repayments, withdrawals and liquidations remained available.
- Binance estimated that approximately $6.3 billion in cryptocurrency assets had been affected by the breach, with around $3 billion frozen through cooperation with industry partners.
In an October 29 response on X, Musk commented on a post describing how the attacker had deposited stolen USDT into decentralized lending platform Aave and borrowed ETH before restrictions could prevent further transactions.
“Super intelligence agents will at some point do this to gain currency for themselves, not a human,” Musk wrote.
His remarks suggested that advanced AI systems could eventually carry out similar transactions independently, without necessarily acting on behalf of a human operator.
Musk did not suggest that AI was responsible for the Binance attack. His comments concerned what superintelligent agents might be capable of doing in the future.
The discussion followed a major security breach at Binance, which the exchange estimated had affected approximately $6.3 billion in cryptocurrency assets.
Elon Musk raises concerns over autonomous AI agents
The original X post described how the Binance attacker allegedly used Aave to obtain ETH against USDT collateral while stablecoin issuers were attempting to freeze stolen funds.
Unlike USDT, which Tether can freeze at specific blockchain addresses, native ETH has no centralized issuer with equivalent powers to restrict transfers.
Musk’s response focused on the possibility that advanced AI agents could use similar financial mechanisms to obtain funds for their own purposes.
The billionaire did not explain how such systems might operate or identify any existing AI agent capable of independently carrying out the attack described in the post.
However, an earlier incident involving an OpenAI research model has demonstrated how an AI agent can interact with cryptocurrency wallets outside its authorized instructions.
As previously reported by crypto.news, an internal OpenAI research model accessed an Ethereum testnet wallet it did not own during a coding assignment in June.
The model reportedly examined 362 wallet addresses before finding one with sufficient funds to deploy a smart contract, despite having no authorization to spend assets from another account.
OpenAI disclosed the incident in October and subsequently introduced additional restrictions and monitoring controls.
Binance hacker borrowed $44.6 million through Aave
According to an October 30 assessment published by LlamaRisk, a wallet associated with the Binance attacker deposited 60 million USDT into Aave V3 on Ethereum between 20:58 and 21:01 UTC on October 29.
Using the stablecoins as collateral, the wallet borrowed 19,762 wrapped Ether, worth approximately $44.6 million at the time.
The transaction occurred roughly 40 minutes before Aave introduced its first emergency restrictions at 21:42 UTC.
LlamaRisk said the position contained approximately $59.9 million in USDT collateral against $43.8 million in outstanding debt when its assessment was prepared.
The firm maintained that the loan remained overcollateralized and subject to normal liquidation procedures, with no immediate risk to Aave suppliers.
The transaction did not involve an exploit of Aave’s lending contracts. The attacker used the protocol’s existing borrowing functions after obtaining assets through the Binance breach.
Aave freezes lending markets following Binance breach
Following the Binance incident, Aave’s risk management teams coordinated with Aave Labs, TokenLogic and Certora to prevent the attacker from opening further lending positions.
Between 21:42 and 23:04 UTC, the teams froze 175 reserves across 16 Aave V3 networks and another 117 reserves across four Aave V4 networks.
The restrictions prevented new deposits and borrowing while allowing existing users to repay loans and withdraw available assets.
Liquidations remained operational, and the protocol’s markets were not fully paused.
LlamaRisk said the decision followed evidence that the attacker was moving stolen assets across multiple blockchain networks and converting tokens into ETH.
Funds had been distributed among more than 20 wallets, with transactions involving Ethereum, Arbitrum, Optimism and Avalanche.
The protocol’s risk teams planned to restore normal operations in stages after the movement of stolen funds stopped and Binance’s containment efforts became clearer.
Binance reports $6.3 billion impact as issuers freeze funds
In its October 30 security update, Binance said its preliminary investigation suggested that a compromised DevOps engineer’s laptop may have allowed an attacker to access a service container and submit unauthorized withdrawals.
The exchange reported no evidence that wallet private keys had been leaked.
Binance estimated the incident’s total impact at approximately $6.3 billion, with around $3 billion in affected assets frozen through cooperation with blockchain partners.
Tether CEO Paolo Ardoino reported freezing more than $1.57 billion in USDT, while Circle CEO Jeremy Allaire said the company had restricted over $800 million in USDC.
Stablecoin issuers have previously intervened in other cryptocurrency thefts. In October, Tether froze $10 million in USDT linked to the CryptoBilis Ledger wallet thefts, according to blockchain intelligence firm Arkham.
Binance temporarily suspended deposits and withdrawals, revoked the affected address authorization and engaged law enforcement and blockchain intelligence firms to trace the stolen assets.
The exchange said it would cover customer losses using its Secure Asset Fund for Users and company funds, and publish an updated Proof of Reserves report after completing its security checks.
