CERT24Critical x402 SDK flaw could drain AI agents’ token balancesLoading data…
CERT24Threat Observatory
Period

Critical x402 SDK flaw could drain AI agents’ token balances

V12 found 25 flaws in x402 code, including three rated critical. One flaw could let a malicious API make an AI agent with automatic signing and no application limits sign a payment for the full balance of a supported token. The x402 Foundation fixed the three critical flaws in releases issued on August 18. Neither V12 nor the x402 Foundation has publicly reported attacks using them.

← Back to intelligence

Critical x402 SDK flaw could drain AI agents’ token balances

V12 found 25 flaws in x402 code, including three rated critical. One flaw could let a malicious API make an AI agent with automatic signing and no application limits sign a payment for the full balance of a supported token. The x402 Foundation fixed the three critical flaws in releases issued on August 18. Neither V12 nor the x402 Foundation has publicly reported attacks using them.