Research: 15 major paying service providers violated safety rules

The study tested 15 major X402 payment service providers, such as Coinbase, Thirdweb, PayAI and Mogami, and found that at least one safety rule had been violated by all the stations surveyed, involving 49 rule violations and 31 different loopholes. The relevant service providers accounted for 99 per cent of the number of X402 transactions and 98 per cent of the amount paid during the study, but this did not represent a gap in the same proportion of transactions. The study summarized the risks as free access to goods or services, asset theft, interruption of services and abuse of gas costs, and verified under restricted conditions that six attack path researchers had not actually transferred the services provider ' s assets. Coinbase, PayAI and Mogami together identified six loopholes, some of which have been repaired, while the scope of application for the remaining associated repairs in the actual X402 infrastructure that are still being processed remains unclear。