[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5iNMBM-RTh3Wezf3iX-yZY2k7dBfm7EB_jPxRh0WkKQ":3},{"article":4,"iocs":42,"watch_terms":43,"solutions":44,"lesson":75},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":24,"category":25,"article_tags":29},"5d07736b-7117-4abb-9af7-6168f0df91d2","Token Approvals Need Separate Rules in AI Agent Wallets","token-approvals-need-separate-rules-in-ai-agent-wallets-170e97","Under Ethereum’s ERC-20 token standard, an approval can authorise another address to spend cryptocurrency from a wallet without transferring the tokens at that moment. For an AI agent paying for online services or interacting with blockchain applications, that creates two security decisions: whether the agent may act, and what authority its action gives to someone […]","AI agents interacting with blockchain applications face complex security decisions regarding token approvals. The ERC-20 standard allows for permissions that authorize spending without immediate transfer, creating a risk if a valid signature is used for malicious approvals. New security models are needed to differentiate between an agent's ability to act and the authority granted by its actions, especially when using account abstraction.","AI agents need new rules for token approvals in crypto wallets.","https:\u002F\u002Fwww.cyberkendra.com\u002F2026\u002F10\u002Ftoken-approvals-need-separate-rules-in-ai-agent-wallets.html","https:\u002F\u002Fwww.cyberkendra.com\u002Fwp-content\u002Fuploads\u002F2026\u002F10\u002Ftoken-approval.webp","2026-10-28T13:32:05+00:00","2026-10-28T14:00:08.384482+00:00",7,[17,20,22],{"name":18,"type":19},"ERC-20","technology",{"name":21,"type":19},"account abstraction",{"name":23,"type":19},"EIP-712","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":24,"icon":26,"name":27,"slug":28},null,"Vulnerabilities","vulnerabilities",[30,35,37],{"category":31},{"id":32,"icon":26,"name":33,"slug":34},"0493c7e9-989a-4692-b4e6-136f5ec09675","Cryptography","cryptography",{"category":36},{"id":24,"icon":26,"name":27,"slug":28},{"category":38},{"id":39,"icon":26,"name":40,"slug":41},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",[],[],{"controls":45,"vendors":74},[46],{"slug":41,"name":47,"problem":48,"products":49},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[50,58,66],{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",[],{"slug":76,"title":77,"body":78,"framework_refs":79,"framework_notes":87},"ai-agent-wallets-need-granular-token-approval-controls","AI Agent Wallets Need Granular Token Approval Controls","AI agents interacting with blockchain applications inherit broad token approval permissions under the ERC-20 standard, which separates the act of authorizing spending from the act of transferring funds. This creates a dangerous attack surface: a valid signature from a legitimate agent can be weaponized to approve malicious token spending without triggering an immediate, visible transfer. The core problem is that current wallet security models treat an agent's ability to act and the authority granted by its actions as equivalent, when they must be distinct. Without granular, context-aware approval rules — especially in account abstraction architectures — a single compromised or manipulated agent action can drain funds silently. New authorization frameworks must enforce least-privilege at the smart contract and wallet policy level, not just at the agent authentication layer.",[80,81,82,83,84,85,86],"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","CIS Control 6: Access Control Management","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","OWASP A06:2021 Vulnerable and Outdated Components","DORA Article 9","CIS Control 18: Penetration Testing",{"DORA Article 9":88,"CIS Control 18: Penetration Testing":89,"NIST SP 800-53 SI-2: Flaw Remediation":90,"CIS Control 6: Access Control Management":91,"OWASP A06:2021 Vulnerable and Outdated Components":92,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":93,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":94},"DORA Article 9 requires financial entities to implement strict access controls and resilient ICT security measures; AI agent wallets handling financial assets must enforce granular authorization controls consistent with these obligations.","Regular penetration testing of AI agent wallet architectures and smart contract integrations would surface the token approval authority-conflation risk before adversaries can exploit it in production environments.","The architectural flaw of conflating agent action capability with approval authority is a design-level vulnerability; SI-2 requires organizations to identify and remediate such flaws in systems before they are exploited.","CIS Control 6 mandates least-privilege access and regular review of permissions; applying this to AI agent wallets would have restricted token approval authority to only the minimum necessary contracts and amounts.","Relying on the default ERC-20 approval model without additional safeguards for AI agent contexts is analogous to using a component with known insecure behaviors; this control urges evaluation and hardening of such dependencies.","The insecure token approval model represents a known technical vulnerability in ERC-20 agent integrations; A.8.8 requires organizations to proactively assess and address such vulnerabilities in their deployed systems.","This incident highlights the failure to distinguish authentication of the agent from the authority of its actions; PR.AA requires that access permissions be scoped and enforced separately from identity verification, which would have limited malicious token approvals."]