News

Bitcoin Is Coming for the $12T Repo Market: Digital Credit and Onchain Repo

Agent Commerce Accelerates, Reshaping the Competitive Logic of the Payments Industry

Research from Accenture, Visa, and Mastercard shows AI agents are moving beyond product search and recommendations into price comparison, payment method selection, and transaction initiation, making 'agent commerce' a new competitive variable in payments.

Halborn Unveils A2A Payment Threat Model: On-Chain Irreversibility Amplifies Security Risks

Blockchain security firm Halborn has released an Agent-to-Agent payment threat model, highlighting risks such as prompt injection, identity spoofing, wallet key leaks, malicious service providers, smart contract vulnerabilities, oracle manipulation, and cascading payments when AI agents autonomously transact using stablecoins and smart contract wallets.

Attack Lab #5: We Paid One Authorization Twice — and Pushed the Audit Fingerprint Beyond Our Own Reach

Two breaks at once. One: with no single-use nonce, a fully-valid payment could be replayed until the budget drained — we added an anti-replay gate (replay → 409). Two: Episode 4's hash chain lived only in our own DB, so an admin rewriting the whole tail couldn't be disproven — we exposed the tip publicly (/api/audit-anchor) and had GitHub witness it on a schedule. Honest limit: true non-repudiation still needs anchoring to a public chain.

Hyundai Card Completes Stablecoin Cross-Border Remittance Pilot, $20,000 Settled in ~7 Minutes

Hyundai Card and Hyundai Motor have completed a proof-of-concept for stablecoin-based cross-border remittance, transferring $20,000 in USDT from the U.S. to Mexico in about seven minutes.

AI Agents Accelerate into Full-Chain Cross-Border Payments, Driving Autonomous Process Orchestration

IMF and payments industry research indicates that AI agents are gradually being applied to authorization verification, compliance screening, payment routing, FX management, settlement tracking, and automated reconciliation in cross-border payments, potentially integrating previously fragmented manual processes into end-to-end intelligent orchestration.

OKX Europe Launches One-Way USDT-to-USDC Conversion Channel

OKX Europe now allows eligible EEA users to deposit USDT and convert it one-way to MiCA-compliant USDC. As Tether has not yet obtained the EU authorization required under the MiCA framework for USDT, the stablecoin cannot be traded or used for other transactions on the OKX Europe platform.

Stripe and Swift Double Down on Next-Gen Payment Infrastructure, Competitive Boundaries Increasingly Blur

ECB: Stablecoins Could Divert Bank Deposits, Digital Euro Can Safeguard Payment Sovereignty

European Central Bank Executive Board member Piero Cipollone warns that European banks face pressures from fee and transaction data erosion, retail deposit diversion by stablecoins, and growing reliance on non-European payment infrastructure.

Attack Lab #3: Our Attribution Was Theater — Anyone Could Spend With Your Agent

The KYA gate checked whether an agent was attributed — never whether you are that agent. Real result: an attacker paid with the victim's agentId, zero credentials, 200 allow; and could overwrite the attributed entity, poisoning the audit chain. We added a seventh gate. Attribution without proof is theater.

Attack Lab #2: We Broke Our Own Firewall — A Thousand Small Payments

A per-transaction cap stops greed, not patience. We found our own reference implementation didn't satisfy our own standard (RAP Pillar 2), added a sixth gate, and caught an uglier float bug that killed legitimate payments. All real run data.

We Attacked a Paying Agent Six Ways — All Six Were Blocked

Prompt injection, whale drain, payee redirection, anonymous impersonation… a real adversarial run against mcp-pay: six blocked, each at a different gate. The key finding — the trust layer must live outside the agent.