Researchers discovered that malicious LLM routers can intercept and modify tool calls before agent execution, with one attack draining a client's $500k wallet. OrcaRouter proposes an Agent Firewall defense that validates tool calls at the execution boundary, offering allow, audit, deny, sanitize, approval hold, and cost-cap capabilities.