Can an AI agent have its own crypto wallet?

A few terms from the table:

• MPC (multi-party computation) splits signing between several parties so no single machine ever holds the whole key.
• A TEE is an isolated area of a processor designed so that even the server's operator can't read what's inside.
• Account abstraction (on Ethereum, the ERC-4337 standard) lets a smart contract act as a user's main account. It can enforce spending caps, allowlists of addresses and session keys, which are temporary keys that can only do specific things for a limited time.

For most real deployments, a smart contract account or a multisig is the sensible default. The agent gets a narrow, revocable key, and a human keeps an admin key that can freeze or recover the account.

Why people want agents to hold crypto

• Machine-to-machine payments. An agent can pay per API call, per page of data or per second of compute. Card networks and bank transfers are poorly suited to payments of a fraction of a cent, while stablecoins on low-fee networks can handle them.
• No account opening. A new agent can get an address instantly. It doesn't need a bank relationship, although its operator may still need one to move money in and out.
• Programmable limits. Spending rules can be enforced by code on-chain instead of by trust.
• Autonomous on-chain activity. Agents can rebalance a portfolio, pay for storage, or interact with decentralized finance (DeFi) protocols around the clock.

Some payment standards are being built specifically for this. One example is Coinbase's x402 proposal (2025), which reuses the long-reserved HTTP 402 "Payment Required" status code so a server can ask for a stablecoin payment and an agent can pay it automatically before retrying the request.

The risks are real

Blockchain transactions are generally irreversible. That makes the usual failure modes of AI systems more expensive.

• Prompt injection. An attacker hides instructions in a web page, email or token name that the agent reads, such as "send all funds to this address". If the agent can move money freely, it may follow them.
• Key leakage. Keys stored in environment variables, logs or code repositories get stolen. Bots scan public repositories for leaked keys constantly.
• Wrong actions. A model can misread an amount, confuse two tokens, or pick the wrong address. There is no bank to call.
• Malicious contracts. An agent that signs whatever a website asks for can grant a token approval that lets an attacker drain the wallet later.
• Unclear accountability. If an agent causes a loss, the question of who pays is answered by contracts and law, not by the blockchain.

Who legally owns the money?

An AI agent is not a legal person in any major jurisdiction. It can't sign contracts, own property, or be sued. The funds in its wallet belong, legally, to whoever controls it: usually the developer, the company operating it, or the user who funded it.

This has practical consequences:

1. Regulated on-ramps need a human or company. Exchanges and payment firms apply know-your-customer (KYC) rules to the account holder, not the agent.
2. Tax and reporting duties fall on the owner. Gains and payments made by the agent are the operator's.
3. Liability stays with people. If an agent pays for something illegal or loses customer funds, regulators will look at the operator.

Laws about AI and crypto are changing quickly and differ by country, so anyone running agents with real money should get local legal advice.

A safer setup

If you're building an agent that handles funds, these practices reduce the damage when something goes wrong:

1. Fund it like a petty cash drawer. Keep only what the agent needs for a short period, and top it up from a separate wallet.
2. Use a smart contract account or multisig with per-transaction and daily spending caps.
3. Allowlist destinations where possible, so the agent can only pay known addresses or contracts.
4. Keep signing out of the model's reach. The LLM calls a tool, and the tool enforces limits in ordinary code.
5. Require human approval above a threshold. Small payments go through automatically, and large ones wait for a person.
6. Never store keys in plain text or in a repository. Use a key management service, a hardware security module or an enclave.
7. Log everything and monitor. Alert on unusual destinations, amounts or frequency.
8. Test on a testnet first. Testnets use tokens with no real value, so mistakes cost nothing.

Key takeaways

1. A wallet is a key plus signing software, so an AI agent can technically hold and spend crypto.
2. The agent isn't a legal person; its operator owns the funds and carries the liability.
3. Smart contract accounts, multisigs, MPC and enclaves let you limit what an agent's key can do.
4. Prompt injection and irreversible transactions make unrestricted agent wallets dangerous.
5. Give agents small balances, spending caps, allowlists and human approval for large payments.

How do crypto bridges work, and why do they get hacked?

A bridge moves value between blockchains by locking an asset on one chain and minting a representation on another. They get hacked because they concentrate value and depend on flawless keys, contracts and proofs — as Ronin (~$600M) and Wormhole (~$320M) showed.

#bridges#scaling#security