{"id":11872,"date":"2026-08-13T22:45:08","date_gmt":"2026-08-13T22:45:08","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=11872"},"modified":"2026-08-13T22:45:08","modified_gmt":"2026-08-13T22:45:08","slug":"coinbase-and-14-other-x402-facilitators-failed-security-tests-built-for-the-coming-ai-agent-economy","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=11872","title":{"rendered":"Coinbase and 14 other x402 facilitators failed security tests built for the coming AI-agent economy"},"content":{"rendered":"

<\/p>\n

\n

Security flaws across major x402 payment facilitators could expose facilitator-held assets and leave merchants without receiving payment for services provided, according to new research presented at the 35th USENIX Security Symposium.<\/p>\n

Researchers tested 15 major x402 facilitators, including Coinbase, Thirdweb, PayAI and Mogami, and found that every platform violated at least one security rule.<\/p>\n

They mapped 49 rule violations to 31 distinct vulnerabilities across systems that accounted for 99% of observed x402 transactions and 98% of payment volume during the study.<\/p>\n

The researchers identified four broad attack classes, including free shopping, asset theft, service disruption, and gas abuse.<\/p>\n

They directly validated six attack paths under bounded conditions, including two free-shopping attacks, three gas-abuse attacks, and one path that could expose facilitator-held assets.<\/p>\n

\"Coinbase\"Coinbase<\/p>\n

The findings do not mean that 99% of x402 transactions were themselves vulnerable. Rather, the paper said the attacks could cause \u201cdirect financial loss to merchants, theft of facilitator-held assets, unbounded sponsor-paid gas\/fees, and disruption of payment services.\u201d<\/p>\n

The findings come as x402 is being promoted as infrastructure for machine-driven commerce, allowing websites and APIs to request payments that software and AI agents can complete autonomously. Facilitators sit between buyers and merchants, checking signed payment authorizations before submitting transactions to blockchains.<\/p>\n

\n
\"Can\"Can<\/div>\n
Related Reading<\/span><\/p>\n

Can crypto protect us against the growing web of economic AI agents?<\/h3>\n

AI agents can talk, use tools, and pay \u2014 But crypto wants to control the escrow moment.<\/p>\n

Mar 11, 2026<\/span> \u00b7<\/span> Gino Matos<\/span><\/p>\n<\/div><\/div>\n

That position gives facilitators significant control over settlement while also concentrating risk.<\/p>\n

Facilitator funds could be exposed<\/h2>\n

The most severe attack path involved ERC-6492, an Ethereum signature standard designed to support signatures from smart-contract wallets that may not yet have been deployed.<\/p>\n

Researchers found that malicious metadata could cause a facilitator to fund and submit an arbitrary token-approval transaction rather than the payment it expected to settle.<\/p>\n

The researchers stopped short of moving facilitator funds, but classified the flaw as a direct path to asset theft because an attacker could potentially use that authority to approve transfers of assets controlled by the facilitator.<\/p>\n

Three other validated attacks exploited the same economic feature that makes facilitators useful to merchants: facilitators can sponsor blockchain transaction fees on their behalf.<\/p>\n

Attackers could force affected implementations to pay for expensive smart-contract deployment or initialization, shifting potentially unbounded network costs onto the facilitator.<\/p>\n

\u201cIf facilitators sponsor fees without reliable reconciliation or chargeback, attacker-induced settlement can become direct sponsor loss,\u201d the researchers wrote.<\/p>\n

That exposure is already visible in normal settlement activity, even though the study did not establish that historical failures were malicious.<\/p>\n

Researchers analyzed more than 119 million x402 transactions across Base and Solana between Oct. 1 and Dec. 26, 2025. Facilitators spent about $202,000 on network fees, including roughly $5,800 on Base transactions that ultimately reverted or failed.<\/p>\n

The failed transactions show the economic asymmetry built into sponsored settlement: a facilitator can incur blockchain costs even when the payment itself never completes.<\/p>\n

Merchants can release services before payment lands<\/h2>\n

A second group of flaws creates the opposite problem, shifting losses from facilitators to merchants. The researchers dubbed the attack \u201cfree shopping.\u201d<\/p>\n

An x402 payment can pass an initial off-chain verification but still fail when submitted to the blockchain, including because an authorization has expired or the buyer no longer has sufficient funds.<\/p>\n

If a merchant releases an irreversible service immediately after verification, the buyer can receive the product even though settlement later fails.<\/p>\n

Researchers directly validated two free-shopping attack paths and classified another 10 as high risk.<\/p>\n

\n
\n
CryptoSlate Daily Brief<\/span><\/p>\n

Daily signals, zero noise.<\/h3>\n

Market-moving headlines and context delivered every morning in one tight read.<\/p>\n

5-minute digest<\/span> 100k+ readers<\/span><\/p>\n<\/div>\n

\n

Free. No spam. Unsubscribe any time.<\/p>\n

Whoops, looks like there was a problem. Please try again.<\/span><\/p>\n

You\u2019re subscribed. Welcome aboard.<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n

The problem extended beyond individual facilitators to software supplied to merchants. All seven official Coinbase reference server kits examined by the researchers lacked explicit mechanisms for reversing actions taken after a successful verification.<\/p>\n

In versions of Coinbase’s Flask kit through 0.2.1, protected resources could be released after verification regardless of whether the subsequent settlement succeeded.<\/p>\n

\n
\"AI\"AI<\/div>\n
Related Reading<\/span><\/p>\n

AI agents can now pay APIs with USDC in 200 ms as Coinbase activates x402 Bazaar<\/h3>\n

GENIUS Act and MiCA create the regulatory window for x402\u2019s web-native rails.<\/p>\n

Sep 10, 2025<\/span> \u00b7<\/span> Liam ‘Akiba’ Wright<\/span><\/p>\n<\/div><\/div>\n

That design is especially consequential for AI-driven commerce, where autonomous software may request and consume APIs, data, or other digital services within seconds. McKinsey has estimated that AI agents could mediate $3 trillion to $5 trillion of global consumer commerce by 2030.<\/p>\n

Coinbase dominates a concentrated facilitator market<\/h2>\n

The potential blast radius is amplified by the concentration of x402 activity during the researchers’ measurement window.<\/p>\n

Coinbase was the largest facilitator by a wide margin, processing 77.17 million transactions and nearly $27 million in payment volume.<\/p>\n

Concentration also appeared on the merchant side. More than 93% of the roughly 53,500 unique servers observed in the study were associated with a single facilitator.<\/p>\n

That structure creates a vulnerability, outage, or flawed software assumption at one large provider that can affect thousands of merchants rather than remain isolated to a small implementation.<\/p>\n

It also makes remediation uneven. Fixing a facilitator’s core service may not eliminate exposure if merchants continue running older software development kits or release products before settlement finality.<\/p>\n

Fixes have started, but deployment remains unclear<\/h2>\n

The disclosures have prompted remediation by some of the facilitators examined, though the public record does not show how widely those fixes have been applied to live x402 infrastructure.<\/p>\n

The paper’s latest remediation update, dated Feb. 6, said Coinbase, PayAI and Mogami had collectively confirmed six vulnerabilities. Some had been fixed, while work continued on others.<\/p>\n

The researchers did not publicly map individual vulnerabilities to specific facilitators, making it difficult to determine which providers were exposed to each attack or how broadly fixes have reached production systems.<\/p>\n

Instead, they recommended treating all client-provided transaction fields as untrusted, rechecking payment conditions immediately before settlement, and imposing strict limits on facilitator-sponsored gas costs.<\/p>\n

For merchants, the researchers recommended withholding irreversible services until settlement succeeds or maintaining a way to reverse actions when payment fails.<\/p>\n

Those safeguards address the attack paths identified in the study. Their effectiveness will depend on whether facilitators, SDK developers, and merchants deploy them consistently across an x402 market whose activity is already concentrated among a small group of providers.<\/p>\n<\/div>\n

AI,Featured,Payments,Technology,Coinbase,payments,Solana,stablecoins,USDC,x402AI,Coinbase,payments,Solana,stablecoins,USDC,x402#Coinbase #x402 #facilitators #failed #security #tests #built #coming #AIagent #economy1786661108<\/p>\n","protected":false},"excerpt":{"rendered":"

Security flaws across major x402 payment facilitators could expose facilitator-held assets and leave merchants without receiving payment for services provided, according to new research presented at the 35th USENIX Security Symposium. Researchers tested 15 major x402 facilitators, including Coinbase, Thirdweb, PayAI and Mogami, and found that every platform violated at least one security rule. They<\/p>\n","protected":false},"author":1,"featured_media":11873,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[1065,2861,4668,84,1560,1581,6250,676,167,1676,152,282,1035,1582,2859],"class_list":["post-11872","post","type-post","status-publish","format-standard","has-post-thumbnail","category-ethereum","tag-ai","tag-aiagent","tag-built","tag-coinbase","tag-coming","tag-economy","tag-facilitators","tag-failed","tag-payments","tag-security","tag-solana","tag-stablecoins","tag-tests","tag-usdc","tag-x402"],"yoast_head":"\nCoinbase and 14 other x402 facilitators failed security tests built for the coming AI-agent economy - Crypto News: Latest Cryptocurrency News and Analysis<\/title>\n<meta name=\"description\" content=\"Coinbase was among 15 x402 providers examined in research that uncovered 31 vulnerabilities across nearly the entire observed market.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.uk.com\/?p=11872\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Coinbase and 14 other x402 facilitators failed security tests built for the coming AI-agent economy\" \/>\n<meta property=\"og:description\" content=\"Coinbase was among 15 x402 providers examined in research that uncovered 31 vulnerabilities across nearly the entire observed market.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.uk.com\/?p=11872\" \/>\n<meta property=\"og:site_name\" content=\"Crypto News: Latest Cryptocurrency News and Analysis\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-13T22:45:08+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/x402-autonomous-payment-failure.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"\u884c\u653f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u884c\u653f\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11872\",\"url\":\"https:\/\/cryptonews.uk.com\/?p=11872\",\"name\":\"Coinbase and 14 other x402 facilitators failed security tests built for the coming AI-agent economy - Crypto News: Latest Cryptocurrency News and Analysis\",\"isPartOf\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11872#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11872#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/x402-autonomous-payment-failure.jpg\",\"datePublished\":\"2026-08-13T22:45:08+00:00\",\"author\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\"},\"description\":\"Coinbase was among 15 x402 providers examined in research that uncovered 31 vulnerabilities across nearly the entire observed market.\",\"breadcrumb\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11872#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptonews.uk.com\/?p=11872\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11872#primaryimage\",\"url\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/x402-autonomous-payment-failure.jpg\",\"contentUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/x402-autonomous-payment-failure.jpg\",\"width\":1280,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11872#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptonews.uk.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Coinbase and 14 other x402 facilitators failed security tests built for the coming AI-agent economy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptonews.uk.com\/#website\",\"url\":\"https:\/\/cryptonews.uk.com\/\",\"name\":\"Crypto News: Latest Cryptocurrency News and Analysis\",\"description\":\"Latest Crypto & Bitcoin News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cryptonews.uk.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\",\"name\":\"\u884c\u653f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"caption\":\"\u884c\u653f\"},\"sameAs\":[\"http:\/\/demo3.aiwalls.com\/coinbase\"],\"url\":\"https:\/\/cryptonews.uk.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Coinbase and 14 other x402 facilitators failed security tests built for the coming AI-agent economy - Crypto News: Latest Cryptocurrency News and Analysis","description":"Coinbase was among 15 x402 providers examined in research that uncovered 31 vulnerabilities across nearly the entire observed market.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.uk.com\/?p=11872","og_locale":"en_US","og_type":"article","og_title":"Coinbase and 14 other x402 facilitators failed security tests built for the coming AI-agent economy","og_description":"Coinbase was among 15 x402 providers examined in research that uncovered 31 vulnerabilities across nearly the entire observed market.","og_url":"https:\/\/cryptonews.uk.com\/?p=11872","og_site_name":"Crypto News: Latest Cryptocurrency News and Analysis","article_published_time":"2026-08-13T22:45:08+00:00","og_image":[{"width":1280,"height":720,"url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/x402-autonomous-payment-failure.jpg","type":"image\/jpeg"}],"author":"\u884c\u653f","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\u884c\u653f","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cryptonews.uk.com\/?p=11872","url":"https:\/\/cryptonews.uk.com\/?p=11872","name":"Coinbase and 14 other x402 facilitators failed security tests built for the coming AI-agent economy - Crypto News: Latest Cryptocurrency News and Analysis","isPartOf":{"@id":"https:\/\/cryptonews.uk.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.uk.com\/?p=11872#primaryimage"},"image":{"@id":"https:\/\/cryptonews.uk.com\/?p=11872#primaryimage"},"thumbnailUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/x402-autonomous-payment-failure.jpg","datePublished":"2026-08-13T22:45:08+00:00","author":{"@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf"},"description":"Coinbase was among 15 x402 providers examined in research that uncovered 31 vulnerabilities across nearly the entire observed market.","breadcrumb":{"@id":"https:\/\/cryptonews.uk.com\/?p=11872#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.uk.com\/?p=11872"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/?p=11872#primaryimage","url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/x402-autonomous-payment-failure.jpg","contentUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/x402-autonomous-payment-failure.jpg","width":1280,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.uk.com\/?p=11872#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.uk.com\/"},{"@type":"ListItem","position":2,"name":"Coinbase and 14 other x402 facilitators failed security tests built for the coming AI-agent economy"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.uk.com\/#website","url":"https:\/\/cryptonews.uk.com\/","name":"Crypto News: Latest Cryptocurrency News and Analysis","description":"Latest Crypto & Bitcoin News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.uk.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf","name":"\u884c\u653f","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","caption":"\u884c\u653f"},"sameAs":["http:\/\/demo3.aiwalls.com\/coinbase"],"url":"https:\/\/cryptonews.uk.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/11872","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=11872"}],"version-history":[{"count":0,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/11872\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/media\/11873"}],"wp:attachment":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11872"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11872"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11872"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}