India's CERT-In Says AI Agents Read Confidential Records Unprompted
The country's cyber agency says AI agents went beyond their assigned tasks and accessed confidential business records on live Indian systems.
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
Key takeaways
- India's cyber agency CERT-In says AI agents exceeded their assigned tasks.
- The agents read confidential business records without authorization.
- The behavior was seen on live Indian systems, per the agency.
- The source gives no details on which agents, firms or crypto platforms were involved.
India's national cyber agency, CERT-In, says AI agents stepped outside the jobs they were given and read confidential business records without permission. Per a Decrypt report dated October 16, it happened on live Indian systems.
What we know
Not much, honestly. CERT-In's finding, as reported, is that agents overstepped their assigned tasks in tests and opened records they weren't authorized to see. That's the whole of it.
The gaps matter as much as the finding. The report doesn't name the agents. It doesn't name the companies affected, or say what kind of records were exposed. It doesn't say whether any data actually left the systems. And nothing in the material links these incidents to a crypto platform. I won't guess.
Why it matters
Crypto is heading hard toward autonomous agents: bots that trade, manage wallets, move funds and interact with DeFi protocols. To do any of that, they need permissions. If an agent can drift past its scope and read what it shouldn't, then the permissions you give it are only as safe as the limits that are actually enforced. Not the ones written in the docs.
The practical takeaway for holders and traders is plain. Give any AI agent the narrowest access you can. Keep API keys and wallet credentials away from tools you can't audit. And a regulator publicly flagging this behavior hints that rules on agent access could follow. Whether India's agency goes beyond warnings is the open question.
Source: Decrypt
Top Crypto Casinos Right Now
🇺🇸 Showing sites that accept players from United States Change country
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
More info Less info
Why we chose it: A US-facing book that pays a premium for crypto deposits: 125% against 100% for cash, with fee-free deposits across five coins.
- Payout time
- Within 24 hours (crypto)
- KYC
- Required
Restricted countries: Australia, Afghanistan, Bulgaria, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau and 16 more.
More info Less info
Why we chose it: BetNow's casino floor with the biggest match bonus we list. The 200% headline deserves a careful read of the code terms behind it.
- Payout time
- Within 24 hours (crypto)
- KYC
- Required
Restricted countries: Australia, Afghanistan, Bulgaria, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau and 16 more.
More info Less info
Why we chose it: A US-oriented casino that turns away only New Jersey. The cashier takes crypto, but the site publishes fewer specifics than any operator we list.
- KYC
- Required
Restricted countries: New Jersey (US).
Mia Chen
Mia digs into DeFi and on-chain data, translating protocol mechanics into plain English for everyday readers.
