18Identity & fraudBelow the top 20
A helper that walked you into a drain
CapabilityAffordanceImpact domainCap-adjacent
Statement (NASA form)
Given that consumer crypto already ships copilots, there is a possibility of the seed phrase or the approve click happening in the chat resulting in savings gone in one signature.
Likelihood
3Probable
Consequence
5Catastrophic
Urgency
3Priority
Personal slice · money. Experimental household card. Not a certified finding.
Composite 18 = 3×5 + 3
Applicable mitigations
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Out-of-band confirmation on a known number · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines