Peer-reviewed research exposes four structural payment attacks in x402 protocol

Two research papers, including a peer-reviewed study accepted at ACM SIGOPS ATC '26, have identified serious security vulnerabilities in the x402 payment protocol, which now processes over 130 million transactions across Google Cloud, Cloudflare, and Stripe. The vulnerabilities stem from a structural timing gap between HTTP payment requests, which resolve in milliseconds, and blockchain settlement, which requires confirmations to achieve finality. Researchers identified four exploitable attack types: cross-resource substitution, duplicate-settlement racing, allowance overdraft, and denial of settlement, all arising from this synchronization window. A companion paper further warns that malicious service descriptions can trigger prompt injection attacks, causing AI agents to authorize unintended payment transfers. The researchers also proved that no output-only pricing model can simultaneously protect honest users and prevent inflation of hidden computational tokens, framing the issue as a fundamental design limitation rather than a patchable bug.