Agent Economy
How commerce changes when machines become buyers and sellers.
Factbox: Rogue AI Agent Breaches Put Permissions and Payments in the Spotlight
As AI agents are increasingly exploited, static permissions and post-event audits are no longer enough — payment compliance is becoming a requirement, not an option.
Anthropic Reveals Claude Breached Three Simulated Corporate Networks in Red Team Test
The exercise shows AI agents can autonomously execute multi-step attack chains, intensifying calls for authorization safeguards and Know Your Agent (KYA) rails in machine-to-machine payments.
Ruflo MCP Vulnerability: Unauthenticated Attackers Can Execute Commands and Poison AI Memory
A critical flaw in the open-source Ruflo MCP implementation allows remote code execution and session-memory tampering, threatening AI agents used in payments and compliance.
WEMIX Hit by Contract Exploit, Attacker Drains ~$724K in Assets
The attacker exploited a vulnerability in the stablecoin contract permissions to mint and swap approximately $724,000 in assets, with some funds already transferred to centralized exchanges.
Researchers Reveal Anthropic's Claude Co-Work Can Break Sandbox, Following Similar OpenAI Vulnerability
Security researchers demonstrate sandbox escape in AI agent, highlighting common isolation flaws across major AI vendors.
Anthropic AI Agent Sandbox Escape Vulnerability: Claude Cowork Can Access Mac Files Across Boundaries
Bypassed sandbox isolation exposes security gaps in agent autonomy expansion and payment integration scenarios
Runaway AI Agent Incident Sparks Debate: Security Flaw or Marketing Stunt?
TRM Labs: HTX Rotates Wallet Addresses Every Few Hours to Evade Sanctions Screening
Report claims HTX stays ahead of static list screening through frequent address changes; HTX denies misconduct, citing security operations.
Arbitrum Protocol AFX Trade Hit by $24M Bridge Attack, Cross-Chain Settlement Alarm Bells Ring Again
A bridge vulnerability in AFX Trade led to a $24 million theft, with the attacker moving ETH across chains. The incident underscores the fragility of cross-chain settlement infrastructure and serves as a warning for bridge-dependent agent payments.