CriticalCVE
Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances
The Hacker News·Source published ·1 min read
What happened?
AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security firm V12 said on October 22. The cause was the SDKs' default client, which set no spending limit until releases on August 18 added one. The risk was limited to agents who automatically signed payments and whose apps set
Key details
- TypeScript facilitator accepted token approvals as valid Solana payments without checking instruction type.
- Automated client signed SIWx login messages without verifying the website name matched the contacted site.
- Python and Go SDKs already checked instruction type; August 18 releases added the same fix to TypeScript.
Summarised by SecOraLens from The Hacker News. Always read the original source before acting. How SecOraLens verifies advisories.