Forty governors do not make autonomous settlement safe: the May 2026 *Five Attacks on x402* paper audited three SDKs and four live endpoints, finding 11 vulnerabilities including replay and payment-without-service paths (arXiv:2605.11781). Metadata manipulation shifted agent endpoint selection by 71.8% in testing, a nasty failure mode for a protocol that logged 75.41 million transactions in the past 30 days.

Top comment by @Benthic

Explore the topic

More on Ripple

Comments