Affected Systems

x402 SDKs (TypeScript, Python, Go) prior to August 18, 2024 releases. Specifically: @x402/core, @x402/svm, @x402/extensions, @x402/fetch, @x402/axios versions before 2.23.0 (TypeScript); Python package before 2.25.0; Go module before v2.28.0. Affects AI agents and applications using x402 for automated API payments with cryptocurrency tokens.

Exploitation Status

No public reports of active exploitation. Vulnerabilities discovered through code review and local testing by V12 security firm. Fixes released August 18, 2024, but not publicly disclosed as security fixes. No CVE assigned, no security advisories published, and npm/PyPI vulnerability databases show no warnings as of October 23, 2024.

Business Impact

Organizations using x402 SDKs for AI agent payments face three critical risks: (1) complete wallet drainage if agents auto-sign payments without app-level limits, (2) payment bypass on Solana allowing free access to paid resources via token approval exploitation (TypeScript only), and (3) cross-site login hijacking via SIWx allowing attackers to impersonate agent wallets on third-party sites. Financial loss potential is high for automated payment systems. Silent patching without security advisories means many deployments likely remain vulnerable months after fixes were released.

Urgency

🟠 Within 24 hours

Recommended Actions

  • Update all x402 SDK packages immediately: @x402/core, @x402/svm, @x402/extensions, @x402/fetch, @x402/axios to version 2.28.0 or later (TypeScript); Python package to 2.25.0 or later; Go module to v2.28.0 or later
  • Audit all AI agent implementations using x402 to verify application-level spending limits are configured, even after SDK updates (default is now $1 cap with USD stablecoins only)
  • Review transaction logs for Solana-based x402 payments between SDK deployment and August 18, 2024 for suspicious token approval transactions that may indicate payment bypass exploitation
  • If using Sign-In-With-X (SIWx), verify that code calling createSIWxPayload directly now passes the 402 response URL parameter; confirm @x402/fetch and @x402/axios wrappers handle this automatically
  • Implement monitoring for abnormal payment amounts or wallet balance changes in x402-enabled agents, particularly those with automatic payment signing enabled