Agent Wallets & Autonomous Onchain Actors

Virtuals Protocol, ai16z and Eliza, Truth Terminal and $GOAT, aixbt — and the risks of prompt injection, key custody, hallucinated transactions, plus the new agent-payment standards from Coinbase, Crossmint, and Privy.

30 min · expert · part of AI × Crypto: The Convergence

What Is an "Agent" and Why Does It Need a Wallet?

An AI agent, in the sense used through 2024-2026, is a software process that combines a large language model (or sometimes several models) with **tools** (APIs it can call), **memory** (state it keeps between turns), and **autonomy** (the ability to take actions without human approval at each step). At its simplest, an agent is a loop: read the world, decide what to do, do it, repeat. Agents need to transact. They make API calls (which cost money), they call other agents' services (which the other agents charge for), they buy data, they pay for inference, they trade onchain, they tip humans, they pay for compute. In the traditional payment stack, doing this without a human in the loop is extraordinarily difficult: Stripe wants a human card, banks want KYC tied to a natural person, fraud-detection systems lock accounts the moment they see unattended activity. Crypto wallets fit agents like a glove. A wallet is just a private key signing transactions. The wallet has no identity tied to a human, no fraud-detection layer, no daily limits, no banking-hours latency. It can pay any address, on any chain, for any amount, in seconds. This is the structural reason agent infrastructure is being built on crypto rails first. That same property — frictionless autonomous spending — is also why agent wallets are dangerous. A compromised wallet drains in one transaction. An LLM tricked into sending the wrong amount has no chargeback. And as we will see, key custody for "autonomous" agents is mostly not actually autonomous in 2024-2026; the keys are usually held by Anthropic, OpenAI, Privy, or Coinbase on the agent's behalf. This lesson maps the major agent projects, the payment infrastructure that lets them transact, and the risks.

Also in this lesson

Virtuals Protocol and the Tokenized-Character Wave
ai16z, Eliza, and the Open-Source Agent Stack
Agent Payment Infrastructure: x402, CDP, Crossmint, Privy
Risks: Prompt Injection, Hallucinated Transactions, Custodial Reality

Key terms

AI agent: A software process combining an LLM with tools, memory, and the ability to act without human approval at each step. Often holds its own crypto wallet for autonomous payments.
Virtuals Protocol: A tokenized-agent launchpad on Base (Coinbase L2) that hosts thousands of AI character agents with their own wallets and tokens. Peaked above $5 billion FDV in early 2025.
Eliza framework: An open-source TypeScript framework released in October 2024 for building autonomous agents with personality, tools (Twitter/X, Discord, Telegram, Solana, EVM), memory adapters, and runners.
Truth Terminal: A partly LLM-controlled X account funded by a $50,000 grant from Marc Andreessen in 2024. Promoted the $GOAT memecoin to over $1B FDV in October 2024, raising questions about LLM-driven shilling and legal liability.
x402 (Coinbase, 2025): A payment standard reviving the HTTP 402 "Payment Required" status code. Servers respond with a payment specification (amount, asset, recipient, chain); x402-aware clients (agents) pay automatically and retry.
CDP wallets: Coinbase Developer Platform programmable wallets with MPC-based key management, policy controls, and APIs for creating wallets at scale. Used by many Base-deployed agents.
Account abstraction (ERC-4337): Ethereum standard that lets smart-contract wallets implement custom signing logic, including session keys with scope and expiration. Reached mainnet March 2023; matured through 2024-2026 with bundler infrastructure (Pimlico, Alchemy, Biconomy, Stackup).
Prompt injection: An attack in which an attacker crafts input that the LLM interprets as instructions to take harmful actions (send funds, leak data, change behavior). The dominant attack vector against agent wallets.
Session key: A short-lived signing key with scoped permissions (e.g., spend up to $100 on specific contracts for 24 hours). The right primitive for agent wallet authorization. Enabled by ERC-4337.
Privy / Crossmint: Embedded wallet infrastructure providers with MPC key management and policy controls, increasingly used as the wallet backend for agent frameworks like Eliza.

Continue this lesson — 4 more sections in the CryptoBipto app.

Open lesson

Educational only — not financial advice.