SoK: Security and Privacy of AI Agents for Blockchain
Not on the map. Why?
Abstract (arXiv)
Blockchain and smart contracts have garnered significant interest in recent years as the foundation of a decentralized, trustless digital ecosystem, thereby eliminating the need for traditional centralized authorities. Despite their central role in powering Web3, their complexity still presents significant barriers for non-expert users. To bridge this gap, Artificial Intelligence (AI)-based agents have emerged as valuable tools for interacting with blockchain environments, supporting a range of tasks, from analyzing on-chain data and optimizing transaction strategies to detecting vulnerabilities within smart contracts. While interest in applying AI to blockchain is growing, the literature still lacks a comprehensive survey that focuses specifically on the intersection with AI agents. Most of the related work only provides general considerations, without focusing on any specific domain. This paper addresses this gap by presenting the first Systematization of Knowledge dedicated to AI-driven systems for blockchain, with a special focus on their security and privacy dimensions, shedding light on their applications, limitations, and future research directions.
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Builds on 38 of its 79 references that are in the map. First posted on arXiv 8 Sep 2025.
Builds on
38 of 79 references.
References · 38
- 2017Attention Is All You Needcited by 60,361
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2023GPT-4 Technical Reportcited by 18,396
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,297
- 2023AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversationcited by 1,988
- 2024Mixtral of Expertscited by 1,823
- 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,443
- 2023Prompt Injection attack against LLM-integrated Applicationscited by 605
- 2025Multi-Agent Collaboration Mechanisms: A Survey of LLMscited by 431
- 2023Augmented Language Models: a Surveycited by 403
26 more
- 2024Exploring Large Language Model based Intelligent Agents: Definitions, Methods, and Prospectscited by 132
- 2023ProPILE: Probing Privacy Leakage in Large Language Modelscited by 129
- 2024AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathwayscited by 127
- 2025AgentDAM: Privacy Leakage Evaluation for Autonomous Web Agentscited by 82
- 2025A Survey of AI Agent Protocolscited by 81
- 2025Authenticated Delegation and Authorized AI Agentscited by 65
- 2024Combining Fine-Tuning and LLM-based Agents for Intuitive Smart Contract Auditing with Justificationscited by 41
- 2019Empirical Review of Automated Analysis Tools on 47,587 Ethereum Smart Contractscited by 36
- 2025Internet of Agents: Fundamentals, Applications, and Challengescited by 31
- 2025Real AI Agents with Fake Memories: Fatal Context Manipulation Attacks on Web3 Agentscited by 24
- 2025LLM-Powered Multi-Agent System for Automated Crypto Portfolio Managementcited by 20
- 2025Security of Internet of Agents: Attacks and Countermeasurescited by 17
- 2025Eliza: A Web3 friendly AI Agent Operating Systemcited by 15
- 2024A Survey on Decentralized Identifiers and Verifiable Credentialscited by 11
- 2023Rethinking Smart Contract Fuzzing: Fuzzing With Invocation Ordering and Important Branch Revisitingcited by 10
- 2024A Reflective LLM-based Agent to Guide Zero-shot Cryptocurrency Tradingcited by 10
- 2024LLM-SmartAudit: Advanced Smart Contract Vulnerability Detectioncited by 10
- 2023DAppSCAN: Building Large-Scale Datasets for Smart Contract Weaknesses in DApp Projectscited by 9
- 2024Blockchain for Large Language Model Security and Safety: A Holistic Surveycited by 8
- 2025SCALM: Detecting Bad Practices in Smart Contracts Through LLMscited by 8
- 2025Guiding LLM-based Smart Contract Generation with Finite State Machinecited by 5
- 2024Blockchain Data Analysis in the Era of Large-Language Modelscited by 2
- 2025AgentDAO: Synthesis of Proposal Transactions Via Abstract DAO Semanticscited by 2
- 2021iContractBot: A Chatbot for Smart Contracts' Specification and Code Generationcited by 1
- 2023Analyzing the Performance of the Inter-Blockchain Communication Protocolcited by 1
- 2025Securing Smart Contract Languages with a Unified Agentic Framework for Vulnerability Repair in Solidity and Movecited by 1
Built on by
Citing papers per year: 2025: 2; 2026: 2.
4 papers.
- 2025Security Analysis of Agentic AI Communication Protocols: A Comparative Evaluationcited by 9
- 2025Secure Autonomous Agent Payments: Verifying Authenticity and Intent in a Trustless Environmentcited by 3
- 2026Agent Flight Recorder: Tamper-Evident Audit Trails with On-Chain Anchoring for Long-Horizon Tool-Using Agentscited by 2
- 2026Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directionscited by 1
- 2026Agent Flight Recorder: Tamper-Evident Audit Trails with On-Chain Anchoring for Long-Horizon Tool-Using Agents1 Sep 2026
- 2026Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions5 Aug 2026
- 2025Secure Autonomous Agent Payments: Verifying Authenticity and Intent in a Trustless Environment8 Nov 2025
- 2025Security Analysis of Agentic AI Communication Protocols: A Comparative Evaluation5 Nov 2025