Study Finds Widespread Security Flaws in x402 Payment Protocol Used by AI Agents
A new arXiv preprint reports critical security vulnerabilities in the x402 payment protocol, which is increasingly used for Web APIs and autonomous AI agents. Researchers systematically analyzed 15 major x402 facilitators and found violations of key security rules in all of them, enabling attacks such as free shopping, asset theft, and service denial. The study notes that affected parties, including Coinbase, have acknowledged the findings and implemented mitigations.
Why it matters: As x402 is rapidly adopted for AI agent payments, these vulnerabilities could expose a large number of merchants and users to financial loss and service disruption.
Full story at: arXiv Cryptography and Security ↗