Skip to content

Add ERC: AI Agent Security Framework for DeFi - #1954

Open
shunfeng8421 wants to merge 6 commits into
ethereum:masterfrom
shunfeng8421:erc-ai-agent-security-standard
Open

Add ERC: AI Agent Security Framework for DeFi#1954
shunfeng8421 wants to merge 6 commits into
ethereum:masterfrom
shunfeng8421:erc-ai-agent-security-standard

Conversation

@shunfeng8421

Copy link
Copy Markdown

Migration from EIPs repo

This proposal was originally submitted as EIP PR #12014. As requested by EIP editor @abcoathup, ERC-type proposals belong in the ERCs repository, so this PR re-submits the proposal here.

Abstract

This EIP proposes the first systematic taxonomy and mitigation framework for AI Agent × DeFi attack surfaces.

What's Included

  • 8 Attack Vectors: Prompt injection, tool hijacking, oracle poisoning, MCP MITM, multi-agent collusion, identity spoofing, reward manipulation, human-in-the-loop bypass
  • 3 Compliance Levels: Gold (8/8), Silver (5/8), Bronze (3/8)
  • Automated Verification: Python compliance checker (aass-compliance.py)

Evidence Base

  • 2 confirmed MCP CVEs (CherryStudio path traversal + SSRF)
  • 5 protocol audits (108 contracts)
  • 63 DeFi exploit reports analyzed (2017-2026)
  • Reference implementation: Safe AI Agent Wallet (Silver compliance)

Related Work

  • Paper: "When Agents Trade: AI Agent × DeFi Attack Surface" (DOI: 10.5281/zenodo.21507085)
  • Repository: github.com/shunfeng8421/defi-hack-memo

Type

Informational ERC — no protocol changes required.

@eip-review-bot

eip-review-bot commented Aug 16, 2026

Copy link
Copy Markdown
Collaborator

File ERCS/erc-1954.md

Requires 1 more review from Editors: @g11tech, @jochem-brouwer, @samwilsn, @xinbenlv

@github-actions

Copy link
Copy Markdown

The commit 72fde4f (as a parent of 4a2cb0d) contains errors.
Please inspect the Run Summary for details.

@github-actions github-actions Bot added the w-ci label Aug 16, 2026
eip-review-bot
eip-review-bot previously approved these changes Aug 16, 2026

@eip-review-bot eip-review-bot left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All Reviewers Have Approved; Performing Automatic Merge...

@github-actions github-actions Bot removed the w-ci label Aug 16, 2026
auto-merge was automatically disabled August 16, 2026 20:23

Head branch was pushed to by a user without write access

@eip-review-bot eip-review-bot changed the title Add ERC: AI Agent Security Standard — 8 Attack Vectors and Mitigation Framework Add ERC: AI Agent Security Framework for DeFi Aug 16, 2026
Comment thread ERCS/erc-1954.md
@@ -0,0 +1,89 @@
---
eip: 1954

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
eip: 1954
eip: 8381

Assigning next sequential EIP/ERC/RIP number.
Numbers are assigned by editors & associates.

Please also update the filename.

Comment thread ERCS/erc-1954.md
title: AI Agent Security Framework for DeFi
description: A systematic classification and mitigation framework for AI agent DeFi surfaces, defining 8 attack vectors and 3 compliance levels
author: Shiqiang Chen (@shunfeng8421)
discussions-to: https://ethereum-magicians.org/t/erc-1954-ai-agent-security-framework-for-defi/29400

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please create a discussions topic in Eth Magicians

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants