Agent Wallets & Autonomous Onchain Actors

What you'll learn

• What Is an "Agent" and Why Does It Need a Wallet?
• Virtuals Protocol and the Tokenized-Character Wave
• ai16z, Eliza, and the Open-Source Agent Stack
• Agent Payment Infrastructure: x402, CDP, Crossmint, Privy
• Risks: Prompt Injection, Hallucinated Transactions, Custodial Reality

Key terms

AI agent

A software process combining an LLM with tools, memory, and the ability to act without human approval at each step. Often holds its own crypto wallet for autonomous payments.

Virtuals Protocol

A tokenized-agent launchpad on Base (Coinbase L2) that hosts thousands of AI character agents with their own wallets and tokens. Peaked above $5 billion FDV in early 2025.

Eliza framework

An open-source TypeScript framework released in October 2024 for building autonomous agents with personality, tools (Twitter/X, Discord, Telegram, Solana, EVM), memory adapters, and runners.

Truth Terminal

A partly LLM-controlled X account funded by a $50,000 grant from Marc Andreessen in 2024. Promoted the $GOAT memecoin to over $1B FDV in October 2024, raising questions about LLM-driven shilling and legal liability.

x402 (Coinbase, 2025)

A payment standard reviving the HTTP 402 "Payment Required" status code. Servers respond with a payment specification (amount, asset, recipient, chain); x402-aware clients (agents) pay automatically and retry.

CDP wallets

Coinbase Developer Platform programmable wallets with MPC-based key management, policy controls, and APIs for creating wallets at scale. Used by many Base-deployed agents.

Account abstraction (ERC-4337)

Ethereum standard that lets smart-contract wallets implement custom signing logic, including session keys with scope and expiration. Reached mainnet March 2023; matured through 2024-2026 with bundler infrastructure (Pimlico, Alchemy, Biconomy, Stackup).

Prompt injection

An attack in which an attacker crafts input that the LLM interprets as instructions to take harmful actions (send funds, leak data, change behavior). The dominant attack vector against agent wallets.

Session key

A short-lived signing key with scoped permissions (e.g., spend up to $100 on specific contracts for 24 hours). The right primitive for agent wallet authorization. Enabled by ERC-4337.

Privy / Crossmint

Embedded wallet infrastructure providers with MPC key management and policy controls, increasingly used as the wallet backend for agent frameworks like Eliza.