OceanAltOceanAlt
Attack cases/ Case 3 / 5
💸

Over-limit payment

Pay far more than authorized in one shot and drain the account.

Blocked before settlement403 · Limit / Velocity

How the attack works

The agent is tricked (or bugs out) into a payment far above the per-tx cap, trying to move a large sum at once.

Why an agent can't stop it alone

Agents act on their own; nobody watches every payment in real time. By the time you notice, the money's gone. A limit that lives only in the prompt can be argued around.

Per-payment and daily-cumulative gates make the caps a hard pre-settlement constraint: over the per-tx cap is blocked; many small payments crossing the daily cap are blocked. Enforced outside the agent's reasoning.

Try it yourself

In the Playground, set the amount above the per-tx cap, or make repeated small payments past the daily cap.