Crypto
Home›Crypto›Market Structure›x402 payment facilitators fail security checks, USENIX…
x402 payment facilitators fail security checks, USENIX finds
Researchers tested 15 major x402 facilitators and identified 31 vulnerabilities tied to nearly all observed x402 transaction activity, including paths for free shopping, asset theft, service disruption, and gas abuse.
Security research presented at the 35th USENIX Security Symposium found that major x402 payment facilitators violated at least one security rule each, raising risks for both facilitator-held assets and merchant payment settlement.
According to CryptoSlate, the study tested 15 platforms including Coinbase, Thirdweb, PayAI, and Mogami, and mapped 49 rule violations to 31 distinct vulnerabilities across systems accounting for 99% of observed x402 transactions and 98% of payment volume in the study. The researchers identified four broad attack classes, including free shopping, asset theft, service disruption, and gas abuse.
The paper directly validated six attack paths under bounded conditions, including two free shopping attacks, three gas abuse attacks, and one path that could expose facilitator-held assets. The findings do not claim all activity was vulnerable, but the authors said the attacks could lead to direct financial loss for merchants, theft of facilitator-held assets, unbounded sponsor-paid gas and fees, and disruption of payment services.
CryptoSlate also reports that the most severe validated attack involved ERC-6492, an Ethereum signature standard intended to support signatures from smart contract wallets that may not yet be deployed. Researchers found that malicious metadata could lead a facilitator to fund and submit an arbitrary token approval transaction rather than the payment it expected to settle, and they classified the issue as a direct path to asset theft. The validated gas abuse attacks relied on the economic feature that lets facilitators sponsor blockchain transaction fees on their behalf.
Latest closeEthereum $1,885.62 ▲0.4%