general
Imported story
Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances
Source: The Hacker News · Published · Last checked 11 hours ago · 1 min read
Read original source ↗ (thehackernews.com)
Publisher excerpt From The Hacker News
AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security firm V12 said on October 22. The cause was the SDKs' default client, which set no spending limit until releases on August 18 added one. The risk was limited to agents who automatically signed payments and whose apps set
Excerpt only, shown with attribution. This content belongs to the original publisher and has not been independently verified by CyberSecurity.pk.