AI Agents in Cryptoland: Practical Attacks and No Silver Bullet