AI trading agents are only as trustworthy as their data

AI trading agents are only as trustworthy as their data

Key points:

  • AI agents now pose a greater systemic risk to crypto than traditional hackers or fraud.

  • Markets are vulnerable because attackers can easily poison the news data that AI agents ingest.

  • AI often follows patterns without understanding context, leading to immediate and highly amplified market errors.

  • Minimal capital is needed to trigger a crash by seeding false narratives across social media.

  • Maintaining human oversight is the most vital safeguard against rapid and synchronized algorithmic market failures.

 

Imagine a major crypto exchange declaring insolvency out of the blue. In the past, hackers or fraud caused wipeouts worth billions of dollars, but today? AI could just as easily be the culprit.

With AI agents that can autonomously trade on cryptocurrency exchanges being pushed by various players in the industry, agents causing a crypto crash is a plausible scenario.

Simply put, if an AI agent is designed to make trades based on market information – including news articles or social media posts – it would be relatively easy to “poison” those sources with false narratives. This could trigger a wave of automated selling from agents that couldn’t distinguish the rumor from reality, which could then crash a coin or a whole market.

While no such attack has happened yet, the conditions for one already exist. The question is no longer if an AI-driven financial crisis will occur, but when – and, more unsettlingly, how little capital it might take to trigger one. 

In my work as an advisor to Web3 companies and government organizations, I have watched the narrative around AI in crypto shift from cautious optimism to uncritical adoption.

Today, 45.7% of platform interactions on Binance are  system-triggered rather than user-initiated, which means they are carried out by a computer, not a human. That share is only growing, and every percentage point represents a wider attack surface for anyone looking to exploit these agents.

How AI trading agents work

While AI trading agents are designed to bring efficiency, they are also highly vulnerable. The combination of autonomous agents, high-frequency trading infrastructure, and an information ecosystem saturated with synthetic media has created a perfect storm for potential attacks.

At a basic level, these agents ingest market data – price movements, order books, news, and social sentiment – and use machine learning models to identify patterns or signals that inform trading decisions. Once certain conditions are met, they execute trades automatically, often at high speed and without human intervention.

However, recent research underscores how fragile these agents are in ways that should alarm anyone using them.

A study released in February tested 13 AI trading models using distorted or misleading market data. Most didn’t adapt at all, and their performance barely changed, suggesting they were just following fixed strategies rather than reacting to new signals. 

When false signals were introduced, some models saw sharp drops in performance, showing how easily they could be thrown off by bad information.

The study also identified what it calls a “competence mirage”: models that identified the correct trading strategy but got the underlying numbers wrong. Knowing what to do and being able to execute it accurately are, it turns out, very different things.

This serves as a reminder that AI agents aren’t sophisticated market participants but pattern-matching engines operating on the data they are fed. When that data is poisoned through coordinated fake news or purchased synthetic datasets, the reaction is immediate and amplified.

Plan of attack

How would such an attack on crypto trading agents work in practice?

An attacker wouldn’t need large amounts of capital to influence the flow of information that trading systems respond to. That could mean seeding false narratives across news outlets, social media, or data feeds using trigger phrases like “liquidity crisis” or “regulatory crackdown,” prompting the agents to react as if the threat were real.

This isn’t purely theoretical, as false information has moved markets before. When the Associated Press Twitter account was hacked in 2013, a single fake tweet briefly wiped billions off the S&P 500. 

Events like the 2010 Flash Crash have also shown how automated trading can amplify shocks at speed. In crypto markets, where sentiment already drives volatility, the bar to trigger a cascade may be even lower.

A relatively well-funded actor could seed false narratives across news feeds, coordinate bot networks to amplify them, and target the data sources that trading systems rely on. Normally, it takes hundreds of millions to move markets, but not in this case.

Protection

There are existing safeguards that can help mitigate these risks, like trading halts or AI-driven fraud detection. Traditional financial markets have mechanisms to halt trading during extreme volatility.

However, these frameworks were built with human behavior in mind and often fail to account for automated systems. As crypto markets operate 24/7 with fewer trading halts, there are a lot more opportunities for attacks.

Others suggest AI will eventually learn to detect manipulation. But research from HEC Paris notes that AI excels at short-term pattern recognition but fails at long-term contextual understanding.

When multiple AI agents rely on similar models and react to identical signals, they tend to make the same decisions at the same time. If those signals are wrong, the mistake spreads across the market, and at the speed of modern trading, that can quickly turn into a wave of synchronized selling.

As with much in AI, keeping a human in the loop may be the most effective safeguard.

The human layer in trading – analysts, compliance officers, and risk managers – shouldn’t disappear but evolve. Their role should be to question information, verify whether news is real, assess where data comes from, and apply judgment that AI lacks.

It may seem like friction to have humans involved. But in a system where speed is the vulnerability, friction is the point.

## What this means for industry players

For founders and investors operating in the crypto trading space, they shouldn’t treat the manipulation of agents as a theoretical risk.

The founders building AI trading infrastructure must position resilience as a value proposition. If they can build systems that can withstand poisoned data, use diverse data sources, and create transparent AI decision pathways, their solutions will stand out.

Meanwhile, investors backing such platforms should look closely at their “human-in-the-loop” protocols. Does the startup rely on fully autonomous execution, or is there mandatory human oversight for critical decisions? 

The latter is a safer bet, as the risk of liability in a flash crash scenario driven by an agent’s error is massive. 

The convergence of AI and financial products in both crypto and traditional finance is inevitable, but its trajectory is not predetermined. We can choose to build systems that are resilient, transparent, and human-centric, or we can sleepwalk into a future where a few lines of poisoned code cause huge losses.

The choice is ours, but the window for action is closing. 

 

Source: https://www.techinasia.com/ai-trading-agents-trustworthy-data

Anndy Lian is an early blockchain adopter and experienced serial entrepreneur who is known for his work in the government sector. He is a best selling book author- “NFT: From Zero to Hero” and “Blockchain Revolution 2030”.

Currently, he is appointed as the Chief Digital Advisor at Mongolia Productivity Organization, championing national digitization. Prior to his current appointments, he was the Chairman of BigONE Exchange, a global top 30 ranked crypto spot exchange and was also the Advisory Board Member for Hyundai DAC, the blockchain arm of South Korea’s largest car manufacturer Hyundai Motor Group. Lian played a pivotal role as the Blockchain Advisor for Asian Productivity Organisation (APO), an intergovernmental organization committed to improving productivity in the Asia-Pacific region.

An avid supporter of incubating start-ups, Anndy has also been a private investor for the past eight years. With a growth investment mindset, Anndy strategically demonstrates this in the companies he chooses to be involved with. He believes that what he is doing through blockchain technology currently will revolutionise and redefine traditional businesses. He also believes that the blockchain industry has to be “redecentralised”.

j j j

Binance and Bitget Announce to Investigate RaveDAO Token Trading

Binance and Bitget Announce to Investigate RaveDAO Token Trading

Binance and Bitget have both announced that they are going to investigate trading activity involving the RaveDAO token after concerns were raised about possible market manipulations.

In response to ZachXBT’s post, Bitget CEO Gracy Chen also confirmed the same direction, stating, “thanks for highlighting! We’ve started investigating into $RAVE.”

Shortly after, Binance co-CEO Richard Teng also responded directly to the issue, saying, “Thanks for flagging this with us @zachxbt. We’re looking into it. We will always do our part to investigate all market misconduct.”

How it all started

The issue became public when ZachXBT shared on X that “pump and dump activity for RAVE token originated on Bitget, Binance and Gate,” adding that insiders were controlling more than 90% of the supply.

He called on Binance co-founder He Yi and Bitget CEO Gracy Chen to carry out internal checks and remove those responsible from their platforms. He also placed a $10,000 bounty for whistleblowers who could provide proof of manipulation. Bitget later confirmed that an investigation into $RAVE had started.

ZachXBT shared early warning signals from on-chain data

ZachXBT explained that wallets linked to the RaveDAO project sent about 18.58 million RAVE tokens to Bitget before any price movement began. At that time, the token was trading under $0.50 and there was no public announcement about the transfer.

Roughly ten hours later, trading activity picked up sharply. At the same time, reports showed that about 74% of traders on Binance were holding short positions, meaning they were betting the price would fall.

Later, around 29.78 million tokens were pulled out from Bitget, which reduced the amount of tokens available for selling on the market. This shift in liquidity is said to have helped fuel a fast price surge, as short positions were squeezed out of the market.

The price moved from about $0.27 to over $14 within seven days, marking a rise of more than 5,500%. In a separate chart shared by ZachXBT, RAVE also showed a 10,383% increase over a 30-day period, highlighting the extreme volatility in trading activity.

ZachXBT said he had already contacted a RaveDAO co-founder before going public but received no response. In his words, “We cannot allow this blatant market manipulation by insiders controlling more than 90% RAVE support to further extract from retail investors.” He later pushed exchanges again to act quickly and investigate all linked accounts involved in the activity.

Insider control Allegations grow stronger

Blockchain analyst Anndy Lian also pointed to heavy token concentration. He stated that the top 10 wallets hold around 98.16% of total supply.

At the same time, the token structure also raised concerns. The fully diluted valuation was said to be around four times higher than the current market cap, a pattern often followed by large corrections in crypto markets. No public codebase or completed security audit has been released for the project, which added more questions around transparency.

RAVE is down 30% in 24 hours

Despite the concerns, RAVE continued to trade actively. At one point, its market capitalization reportedly surged to over $6.52 billion. The price also rose by about 44% on Saturday, reaching around $27.23 during early trading hours. However, it is now down by 30% to about $11.

RaveDAO price chart | Source: CoinMarketCap

ZachXBT maintained that coordinated actions from insiders may have driven the price movement through controlled supply and liquidity shifts.

 

Source: https://www.cryptotimes.io/2026/04/18/binance-and-bitget-announce-to-investigate-ravedao-token-trading/

Anndy Lian is an early blockchain adopter and experienced serial entrepreneur who is known for his work in the government sector. He is a best selling book author- “NFT: From Zero to Hero” and “Blockchain Revolution 2030”.

Currently, he is appointed as the Chief Digital Advisor at Mongolia Productivity Organization, championing national digitization. Prior to his current appointments, he was the Chairman of BigONE Exchange, a global top 30 ranked crypto spot exchange and was also the Advisory Board Member for Hyundai DAC, the blockchain arm of South Korea’s largest car manufacturer Hyundai Motor Group. Lian played a pivotal role as the Blockchain Advisor for Asian Productivity Organisation (APO), an intergovernmental organization committed to improving productivity in the Asia-Pacific region.

An avid supporter of incubating start-ups, Anndy has also been a private investor for the past eight years. With a growth investment mindset, Anndy strategically demonstrates this in the companies he chooses to be involved with. He believes that what he is doing through blockchain technology currently will revolutionise and redefine traditional businesses. He also believes that the blockchain industry has to be “redecentralised”.

j j j

The Treasury Trap: How Crypto-Backed Stocks Are Trading Below Their Own Assets

The Treasury Trap: How Crypto-Backed Stocks Are Trading Below Their Own Assets

I’ve looked into the financial markets for over two decades, from the dot-com bubble to the global financial crisis, from the rise of passive ETFs to the wild west of crypto winters. But nothing in my career has felt quite as structurally precarious as the current collapse of the digital asset treasury company (DATC) model. It’s not just a market correction. It’s the implosion of a financial illusion built on leverage, narrative, and a dangerous assumption that arbitrage would hold forever. Today, the numbers speak for themselves: market-to-Net Asset Value (mNAV) ratios, the very heartbeat of these firms, are collapsing. Strategy, once the gold standard, now trades near an mNAV of 1.5. That might sound healthy until you realize it’s a steep discount from the 3x, 4x, even 5x premiums it once commanded. Worse, companies like Bitmine Immersion and SharpLink have already dipped below 1.0, meaning their stock prices are now less than the value of the Bitcoin or Ethereum they claim to hold. In plain terms, you could buy their shares, liquidate the company, and walk away with more crypto than the market is currently pricing in. That’s not a bargain, it’s a red flag waving violently in a hurricane.

 

Why is this happening? Because the model is breaking. Not bending. Breaking. And the cracks are spreading fast.

At the core of the rot is nonstop dilution. These companies rely heavily on At-The-Market (ATM) equity programs to raise capital. The idea was elegant in theory: when the stock trades above NAV, issue new shares, use the proceeds to buy more BTC or ETH, and watch the cycle compound. But in practice, it’s a self-cannibalizing machine. Every time they flood the market with new shares, Forward Industries, for instance, has an ATM program sized at $4 billion, the share price gets hammered by supply overload. This happens even as their crypto holdings grow. The result? A paradoxical situation where the company’s balance sheet strengthens while its equity valuation weakens. Retail investors, who bought in expecting to ride the coattails of Bitcoin’s rallies, are instead watching their holdings lag, or worse, decline, while BTC soars. Confidence evaporates. They exit. And that retail selling, combined with relentless dilution, creates a textbook death spiral: more shares issued, lower price per share, wider mNAV discount, more retail panic, even more pressure to raise capital via dilution. The gap between asset value and market perception doesn’t just widen; it yawns open like a fault line.

 

So what can these firms do? The options are grim, and none are sustainable without fundamental change.

One path is issuing high-yield preferred shares. On the surface, it sounds attractive: offer 8%, 10%, even 12% to lure yield-hungry investors back. But let’s be brutally honest, how does a company with no real revenue, no operating profits, and a stated mission to hold crypto forever generate the cash to pay that yield? The only liquid asset they have is the very Bitcoin or Ethereum they swore never to sell. To pay a dividend would be to betray their core thesis and signal desperation. It’s a non-starter.

Another idea is share buybacks. In normal markets, buybacks are a powerful tool to support valuation and signal confidence. But these companies don’t have cash reserves. They survive on new issuance. Their entire financial engine runs on selling equity to buy crypto. Where would the money for buybacks come from? It’s like trying to fill a bucket with a hole in the bottom using water from the same bucket. The math simply doesn’t work.

That leaves the nuclear option: direct redemptions. Allow shareholders to exchange their stock for the underlying BTC or ETH at NAV. This would instantly restore mNAV parity. No more discount. No more illusion. But this move would effectively transform these entities into exchange-traded funds. And that’s a regulatory line they cannot cross. The SEC has spent years carefully approving spot Bitcoin and Ethereum ETFs under strict custody, transparency, and investor protection rules. A backdoor redemption mechanism would trigger immediate regulatory intervention, likely a halt in trading, enforcement actions, or forced restructuring. The moment they offer redemptions, they’re no longer a strategic treasury; they’re an unregistered investment company. The legal risk is existential.

This entire house of cards was built on a playbook pioneered by Michael Saylor’s Strategy, which raised $27 billion to accumulate Bitcoin. The market rewarded it with massive premiums because it was first, credible, and operated with a degree of transparency. But imitation is not innovation. Companies like Metaplanet in Japan tried to copy the model, and dozens more rushed in, believing the premium was a permanent feature, not a temporary anomaly of early-mover advantage and market euphoria. Now, as the arbitrage breaks, when the stock no longer reliably tracks or outperforms the underlying asset, the cycle ends. These firms weren’t Bitcoin treasuries. They were volatility wrappers. And every wrapper, no matter how shiny, eventually unwinds.

 

But the deeper, more troubling truth is how these companies are born and funded. This isn’t public finance as we know it. It’s a shadow system of corporate alchemy.

The creation process bypasses traditional IPO safeguards entirely. There are three dominant playbooks, all designed for speed and opacity. The first is the reverse merger: find a dying public shell, no revenue, few shareholders, trading on fumes, take control, rebrand, and emerge as a digital asset treasury. TRON did this with SRM Entertainment. Janover became DeFi Development Corp. overnight. The second is the SPAC route: merge with a special purpose acquisition company that’s already public, clean, and hungry for a deal. The third is the silent takeover: quietly buy 51% of a microcap stock from insiders or on the open market, stage a board coup, and pivot the company’s entire identity without a formal merger filing. Over 30 companies in 2025 alone have used one of these three models. The infrastructure is now industrialized. You don’t need a product, a team, or a track record. You just need legal control of a broken ticker and a compelling crypto narrative.

Funding follows the same pattern of opacity. These aren’t startups raising from VCs based on technology or traction. They’re capital markets machines built to convert stock price hype into crypto holdings. They use three high-speed mechanisms. First, PIPEs, Private Investment in Public Equity deals, where institutional insiders buy large blocks of stock at a steep discount, behind closed doors. TRON raised $100 million this way. Strive Asset Management pulled in $750 million. Forward Industries secured $1.65 billion for Solana plays alone. These aren’t seed rounds, they’re pre-arranged liquidity events for insiders.

Second, convertible notes: debt instruments that convert into equity if the stock price rises. GameStop raised $2.7 billion this way to buy Bitcoin. Nano Labs prepped $500 million for BNB. It’s debt disguised as equity, a ticking time bomb of future dilution that explodes the moment the stock rallies.

Third, ATM programs, which we’ve already discussed. The reflexive loop is clear: hype the narrative, stock trades above NAV, sell shares, buy crypto, re-hype, repeat. It’s a closed loop that works beautifully, until it doesn’t. And when it breaks, retail investors are left holding the bag.

This brings us to the most corrosive element of all: insider trading isn’t an exception in this space, it’s the operating model. Information leaks at every stage. Legal firms drafting merger documents. Exchanges prepping wallet integrations. Advisors whispering to favored funds. But the most egregious leaks happen during roadshows, the private investor meetings that precede public announcements. SharpLink’s stock was flat until day two of its roadshow. Then, it spiked 1,000% before the deal even closed. That’s not organic market discovery. That’s privileged information being weaponized. Insiders get in early, often for pennies, then dump on retail once the hype hits social media. This is the new digital IPO: no lockups, minimal disclosure, zero accountability.

I have seen cycles come and go, I’m deeply skeptical that this model survives another bull run. The structural flaws are too severe, the incentives too misaligned, the regulatory risks too high. The mNAV collapse is the market’s verdict: these wrappers add cost, risk, and opacity without delivering the promised premium. If mNAV stays below 1, the illusion is over. There’s no magic. No alchemy. Just underperforming shells trading at a discount to the very assets they’re supposed to represent.

To founders, traders, and investors: if you’re not asking who minted the company, who funded it in private, and who front-ran the announcement, you’re not an investor, you’re exit liquidity. And in this game, the house always wins. Until it doesn’t.

 

Source: https://www.benzinga.com/Opinion/25/10/48273792/the-treasury-trap-how-crypto-backed-stocks-are-trading-below-their-own-assets

Anndy Lian is an early blockchain adopter and experienced serial entrepreneur who is known for his work in the government sector. He is a best selling book author- “NFT: From Zero to Hero” and “Blockchain Revolution 2030”.

Currently, he is appointed as the Chief Digital Advisor at Mongolia Productivity Organization, championing national digitization. Prior to his current appointments, he was the Chairman of BigONE Exchange, a global top 30 ranked crypto spot exchange and was also the Advisory Board Member for Hyundai DAC, the blockchain arm of South Korea’s largest car manufacturer Hyundai Motor Group. Lian played a pivotal role as the Blockchain Advisor for Asian Productivity Organisation (APO), an intergovernmental organization committed to improving productivity in the Asia-Pacific region.

An avid supporter of incubating start-ups, Anndy has also been a private investor for the past eight years. With a growth investment mindset, Anndy strategically demonstrates this in the companies he chooses to be involved with. He believes that what he is doing through blockchain technology currently will revolutionise and redefine traditional businesses. He also believes that the blockchain industry has to be “redecentralised”.

j j j