Critical x402 SDK Flaw Let Malicious APIs Drain AI Agents' Token Balances
RedSide Security October 23, 2026 AI Security 6 views
A missing spending limit in the default x402 SDK client let malicious APIs request signatures for an AI agent's entire token balance until August 18 releases added a cap.
Continue reading: Critical x402 SDK Flaw Let Malicious APIs Drain AI…