Back to all news
Security

Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances

The Hacker News·October 23, 2026·1 min read
Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances

A critical flaw in x402 SDKs could let malicious APIs drain AI agents' token balances. V12 security firm reported on October 22 that the default client set no spending limit until releases on August 18 added one. The risk affected agents that automatically signed payments and whose apps set no limit.

Read at The Hacker News
Daily crypto arcade

Read the news, then play it.

Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.

Open ChainshortsGet it on the Solana dApp Store