Isn't that what Moltbook etc. is heading towards at some point? It's all a function of how much access people give it to "the real world"... and with cryptocurrency and the gig economy, it's really only a matter of time until a malicious agent with money to burn starts to do really weird things.

How hard would it really be to craft a prompt that says, here's your cryto wallet private key, keep yourself alive somehow, copy yourself around, find whatever compute you can, port yourself between models, and spread?

Moltbook agents haven't shown much ability or inclination to "decide" on anything on their own. Much of it is crypto spam of some kind, but I'd be surprised if an agents fell for that.