Security researchers uncovered 31 previously unknown vulnerabilities affecting 15 payment facilitators handling x402 crypto transactions. These providers processed 99% of the transactions and 98% of the total volume recorded, exposing a vast portion of the market to risks of theft and fraud.
Scope of the Vulnerabilities
The investigation revealed that the vulnerable services connected around 60,000 sellers with approximately 360,000 buyers. Although the study did not state that 99% of individual payments were actively exploited, the presence of these security gaps means the majority of x402 payments could potentially be compromised if exploited by malicious actors.
Implications for Crypto Payment Users
This report highlights the urgent need for improved security measures in crypto payment infrastructure. As these flaws span most of the market's transaction volume, users and vendors relying on x402 payments face increased risks. This situation calls for swift action among service providers to patch vulnerabilities and prevent possible theft or fraud at scale.
