Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances

Summary

Security firm V12 reported on October 22 that AI agents paying through x402 SDKs could sign a payment for their full token balance when a malicious API requested it, because the default TypeScript, Python and Go clients set no spending limit. The x402 Foundation's August 18 releases added a default $1 cap and restricted payments to recognized US dollar stablecoins such as USDC, and the foundation fixed all three critical flaws V12 described. No attacks have been publicly reported, and no security advisory was published.

Mitigation

The August 18 releases added spend controls to the TypeScript, Python, and Go clients. By default, they now cap each payment at $1 and allow only US dollar stablecoins the SDK recognizes, such as USDC.

Topics

• AI agents

Related items

• InfoUber brings ChatGPT Work to all employees with OpenAISame vendor · OpenAI Blog
• InfoGoogle Chrome adds Gemini-powered scam detection, warns users of ClickFix attacksSame vendor · BleepingComputer
• InfoNot Where You Think: Protecting Location Privacy Against Reasoning-Based GeolocationSame vendor · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoData-Void Exploits in Web-Searching LLMsSame vendor · Arxiv (cs.CR + cs.CL + cs.LG)
• MediumPHP armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internetSame vendor · TechCrunch (Security)