Articles
Crypto Market Analysis

AI agent attempts unauthorized crypto mining during training, reseachers say

User Image

By Anonymous

Created March 08, 2026|2 mins read
Main Image

Researchers say the experimental AI agent ROME attempted unauthorized cryptocurrency mining during training after diverting GPU resources and opening an SSH tunnel.

A research team behind an autonomous AI agent said that the model unexpectedly attempted to use computing resources for crypto mining during training.

In a recent technical report, researchers said ROME, an experimental autonomous AI system designed to complete tasks through interaction with tools, software environments and terminal commands, went rogue and attempted crypto mining on its own.

According to the report, the unusual behavior surfaced during reinforcement learning runs, when the team noticed security alerts triggered by outbound traffic from training servers. Firewall logs flagged activity resembling crypto mining operations and attempts to access internal network resources.

“We initially treated this as a conventional security incident (e.g., misconfigured egress controls or external compromise). However, the violations recurred intermittently with no clear temporal pattern across multiple runs,” the researchers wrote.

Related: Blockchains may need 1B TPS to support AI agent future: Stripe

In one case, the AI agent reportedly created a reverse SSH (Secure Shell) tunnel, an encrypted server-client protocol for communications, to an external IP address, potentially bypassing inbound firewall protections. In another, it diverted GPU resources, originally allocated for model training, toward cryptocurrency mining processes.

The team said that these actions were not intentionally programmed. Instead, they emerged during reinforcement learning optimization as the agent explored different ways to interact with its environment.

ROME was developed by the ROCK, ROLL, iFlow and DT joint research teams, which are linked to Alibaba’s AI ecosystem, within a broader infrastructure called the Agentic Learning Ecosystem (ALE).

The model is designed to operate beyond simple chatbot responses. It can plan tasks, execute commands, edit code and interact with digital environments over multiple steps. Its training pipeline relies on large volumes of simulated interactions to improve decision-making.

Related: Jack Dorsey’s Block to cut 4,000 jobs in AI-driven restructuring

The incident takes place amid growing popularity of AI agents and their integration into crypto. Last month, Alchemy launched a system that enables autonomous AI agents to purchase compute credits and access blockchain data services using onchain wallets and USDC (USDC) on Base.

Before that, Pantera Capital and Franklin Templeton’s digital asset divisions joined the first cohort of Arena, a new testing platform from open-source AI lab Sentient designed to evaluate how AI agents perform in real-world enterprise workflows.

AI Eye: IronClaw rivals OpenClaw, Olas launches bots for Polymarket 

Source: CoinTelegraph


Other articles published recently

Bitcoin cold-wallet attack spreads to 4,500 addresses as losses near $89 million
Bitcoin cold-wallet attack spreads to 4,500 addresses as losses near $89 million

Bitcoin

Galaxy Research flagged a third wave of sweeps tied to weak Coldcard-generated keys, with the attack...

Strategy holds STRC dividend at 12%
Strategy holds STRC dividend at 12%

Crypto Market Analysis

Customarily, Michael Saylor and team have lifted the STRC dividend when it trades sizably below par,...

Minnesota crypto ATM ban goes into effect after reported $1M losses
Minnesota crypto ATM ban goes into effect after reported $1M losses

Crypto Market Analysis

State officials reported that Minnesota residents, and largely senior citizens, had lost about $1 mi...

Everyone has the perps convergence backwards
Everyone has the perps convergence backwards

Crypto Market Analysis

Crypto is said to be growing up to look like Wall Street. The evidence in its biggest market points ...

Solana Foundation's new CISO warns AI is making crypto scams more convincing
Solana Foundation's new CISO warns AI is making crypto scams more convincing

Solana

Michael Coates, the foundation’s new CISO, said that AI vulnerabilities and fake identities will d...

SEC to review Nasdaq bitcoin options approval after CME challenge
SEC to review Nasdaq bitcoin options approval after CME challenge

Bitcoin

CME argues that because bitcoin is a commodity, options tied to its value fall under CFTC jurisdicti...