#x402
-
Flaw in x402 SDKs Let Malicious APIs Drain AI Agents’ Wallets
Security firm V12 says that before August's updates the x402 default client set no payment limit — so an agent could sign away its entire token balance if a hostile service asked.