Why memory injection beats prompt injection against on-chain AI agents, in three switchable charts over CrAIBench: 685 attacks skewed to trading, a 55.1%-vs-0% gap on the strongest model, and the fine-tuning defense that drops attack success 85.1% to 1.7%. Tap or arrow the bars for numbers.
An agent doesn't need its key stolen to drain a wallet — it can be talked into signing. CrAIBench shows memory injection beating prompt injection 55% to ~0% on the strongest model, and only fine-tuning closes the gap.