{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "x402 SDK flaws could let malicious APIs drain AI agents' token balances · updates",
  "home_page_url": "https://pwn.watch/i/x402-sdk-critical-flaws-v12",
  "feed_url": "https://pwn.watch/i/x402-sdk-critical-flaws-v12/feed.json",
  "description": "V12 disclosed 25 flaws in the x402 agent-payment SDKs, three rated critical: the default client had no spending limit (a hostile API could ask for an agent's whole token balance), the TypeScript Solana facilitator accepted token approvals as payments, and the SIWx login helper signed messages for other websites. All three were fixed in the August 18 releases, but no advisory was published, so npm audit and PyPI don't warn. Update @x402/fetch, @x402/axios, @x402/extensions and @x402/svm to 2.23.0 or later.",
  "language": "en",
  "_pwn": {
    "slug": "x402-sdk-critical-flaws-v12",
    "severity": "critical",
    "status": "live",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/x402-sdk-critical-flaws-v12/feed.xml",
    "llms": "https://pwn.watch/i/x402-sdk-critical-flaws-v12/llms.txt",
    "json": "https://pwn.watch/i/x402-sdk-critical-flaws-v12.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/x402-sdk-critical-flaws-v12#2026-10-23-85b47736",
      "url": "https://pwn.watch/i/x402-sdk-critical-flaws-v12#2026-10-23-85b47736",
      "title": "x402 SDK flaws could let malicious APIs drain AI agents' token balances: The Hacker News found the foundation published no security advisory for the three flaws, so npm audit and PyPI report nothing for the last vulnerable releases. Patched clients now cap each payment at $1 and allow only recognized USD stablecoins unless the app sets its own spend controls.",
      "content_text": "x402 SDK flaws could let malicious APIs drain AI agents' token balances: The Hacker News found the foundation published no security advisory for the three flaws, so npm audit and PyPI report nothing for the last vulnerable releases. Patched clients now cap each payment at $1 and allow only recognized USD stablecoins unless the app sets its own spend controls.\n\nSource: https://thehackernews.com/2026/10/critical-x402-sdk-flaw-could-let.html",
      "date_published": "2026-10-23T00:00:00.000Z",
      "external_url": "https://thehackernews.com/2026/10/critical-x402-sdk-flaw-could-let.html",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/x402-sdk-critical-flaws-v12#2026-10-22-634c2c8d",
      "url": "https://pwn.watch/i/x402-sdk-critical-flaws-v12#2026-10-22-634c2c8d",
      "title": "x402 SDK flaws could let malicious APIs drain AI agents' token balances: V12 published 25 x402 findings with three critical ones detailed: no default spend limit, Solana ApproveChecked accepted as TransferChecked in the TypeScript facilitator (a complete payment bypass in local tests), and SIWx signing relayed login messages for other domains. The x402 Foundation had fixed all three in the August 18 releases.",
      "content_text": "x402 SDK flaws could let malicious APIs drain AI agents' token balances: V12 published 25 x402 findings with three critical ones detailed: no default spend limit, Solana ApproveChecked accepted as TransferChecked in the TypeScript facilitator (a complete payment bypass in local tests), and SIWx signing relayed login messages for other domains. The x402 Foundation had fixed all three in the August 18 releases.\n\nSource: https://v12.sh/blog/x402",
      "date_published": "2026-10-22T00:00:00.000Z",
      "external_url": "https://v12.sh/blog/x402",
      "tags": [
        "critical"
      ]
    }
  ]
}