Why AI Agent Wallets Must Be Non-Custodial: The Lazarus Attack Made It Obvious

Why AI Agent Wallets Must Be Non-Custodial: The Lazarus Attack Made It Obvious Lazarus Group drained another hot wallet. This time it was Bitrefill. If your AI agents are running on custodial wallets, you're looking at the same attack surface — and it's getting larger every month agents get more capable. I've been building agent-wallet-sdk for a few months — a non-custodial wallet designed specifically for autonomous AI agents. The kind that pay for APIs, hire sub-agents, and execute onchain transactions without a human approving every move. When we started, the most common pushback was: "Why non-custodial? Custodial is so much easier to wire up." It's March 2026. Lazarus just answered that question for the entire industry. What Happened at Bitrefill Gartner confirmed Lazarus Group compromised Bitrefill's hot wallet this month using a combination of compromised API keys and a prompt injection through their customer-facing AI assistant. The injection escalated privileges to the payment