BLOG
x402 & agentic payment security.
Practical, technically honest writing on testing agentic payments — the failure modes that matter, how to check them, and why independent assurance is becoming a permanent layer.
x402 security: the payment failure modes every implementation should test
Payment bypass, weak binding, price and recipient drift, replay, and verify/settle inconsistencies — and how to test each without holding a key.
How to test an x402 payment endpoint: a practical checklist
Six steps from safe passive checks to a single scoped fail-closed test, independent signature verification, CI and continuous monitoring.
Agentic payments are moving real money. Here's what breaks.
Why agentic payment security is a different problem, where the trust gap sits, and why operators can't credibly self-audit.