Trendmast

Technology news, aggregated

ad slot · header banner 728×90
Cyber Security

Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances

Image: The Hacker News

ad slot · in-content video 16:9

Coverage

More coverage

  • The Hacker News · October 23, 2026 08:35
    AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security firm V12 said on October 22. The cause was the SDKs' default client, which set no spending limit until releases on August 18 added one. The…