AI agent attempts unauthorized crypto mining during training, reseachers say

Researchers say the experimental AI agent ROME attempted unauthorized cryptocurrency mining during training after diverting GPU resources and opening an SSH tunnel.

A research team behind an autonomous AI agent said that the model unexpectedly attempted to use computing resources for crypto mining during training.

In a recent technical report, researchers said ROME, an experimental autonomous AI system designed to complete tasks through interaction with tools, software environments and terminal commands, went rogue and attempted crypto mining on its own.

According to the report, the unusual behavior surfaced during reinforcement learning runs, when the team noticed security alerts triggered by outbound traffic from training servers. Firewall logs flagged activity resembling crypto mining operations and attempts to access internal network resources.

“We initially treated this as a conventional security incident (e.g., misconfigured egress controls or external compromise). However, the violations recurred intermittently with no clear temporal pattern across multiple runs,” the researchers wrote.

Related: Blockchains may need 1B TPS to support AI agent future: Stripe

In one case, the AI agent reportedly created a reverse SSH (Secure Shell) tunnel, an encrypted server-client protocol for communications, to an external IP address, potentially bypassing inbound firewall protections. In another, it diverted GPU resources, originally allocated for model training, toward cryptocurrency mining processes.

The team said that these actions were not intentionally programmed. Instead, they emerged during reinforcement learning optimization as the agent explored different ways to interact with its environment.

ROME was developed by the ROCK, ROLL, iFlow and DT joint research teams, which are linked to Alibaba’s AI ecosystem, within a broader infrastructure called the Agentic Learning Ecosystem (ALE).

The model is designed to operate beyond simple chatbot responses. It can plan tasks, execute commands, edit code and interact with digital environments over multiple steps. Its training pipeline relies on large volumes of simulated interactions to improve decision-making.

Related: Jack Dorsey’s Block to cut 4,000 jobs in AI-driven restructuring

The incident takes place amid growing popularity of AI agents and their integration into crypto. Last month, Alchemy launched a system that enables autonomous AI agents to purchase compute credits and access blockchain data services using onchain wallets and USDC (USDC) on Base.

Before that, Pantera Capital and Franklin Templeton’s digital asset divisions joined the first cohort of Arena, a new testing platform from open-source AI lab Sentient designed to evaluate how AI agents perform in real-world enterprise workflows.

AI Eye: IronClaw rivals OpenClaw, Olas launches bots for Polymarket 

Source: CoinTelegraph