The Beginning of Agentic Finance (8 minute read)
Three Ethereum standards are converging to build the first complete financial system designed for AI agents, enabling machines to transact, build reputation, and execute commerce without human intermediaries.
Deep dive
- x402 revives HTTP 402 to enable machine-to-machine payments: client requests resource, server responds with 402 payment instructions, client signs stablecoin payment, facilitator settles on-chain, server delivers—no human intervention required
- Initial x402 adoption was speculative with Galaxy Research documenting that over 50% of volume through December 2025 came from teams minting and trading memecoins, but activity has now stabilized at ~200K transactions weekly
- x402 V2 launched December 2025 with wallet-based identity, reusable sessions, multi-chain support, legacy payment rails (ACH, SEPA, cards), and the "Upto" scheme that lets clients authorize a maximum amount while servers settle for actual usage—critical for LLMs with unpredictable costs
- Cloudflare co-launched the x402 Foundation and integrated it with Agents SDK and MCP servers, enabling batch payments, subscriptions, and daily rollups for use cases like "pay per crawl"
- ERC-8004 solves the trust problem with three registries: Identity (ERC-721 tokens with capabilities and endpoints), Reputation (cryptographically verified feedback), and Validation (third-party verification with economic stakes via ZK/TEE attestations, currently in discussion)
- Base leads ERC-8004 adoption with the largest share of ~98K agent registrations across 10+ EVM chains since late January 2026 launch, followed by Ethereum mainnet and MegaETH
- ERC-8183 fills the commerce gap between payments and trust by defining a Job primitive with four roles (Client, Provider, Evaluator, optional hooks) and five states (Open, Funded, Submitted, Completed/Rejected/Expired)—creating an on-chain equivalent of card authorization-and-capture
- The three standards form a self-reinforcing loop: agents discovered via ERC-8004 reputation, assigned work via ERC-8183 jobs, paid through x402, with each completed job feeding back into reputation registries
- First working proof-of-concept deployed early 2026: OpenMind's robot dog used OM1 OS, x402 for payment negotiation, and Circle's Nanopayments to pay for its own electricity in USDC at a charging station without accounts or human intervention
- ERC-8211 published April 2026 (co-developed by Biconomy and Ethereum Foundation) adds dynamic, constraint-guarded execution that lets agents adapt multi-step DeFi strategies to live on-chain conditions in real time
- TradFi infrastructure targeting same problem: Stripe/Tempo's Machine Payments Protocol uses Shared Payment Tokens (SPTs) giving merchants limited authorization to charge via their preferred infrastructure while maintaining fraud detection, chargebacks, and compliance
- Citrini Research argues cost structure favors crypto: AI agents programmed to minimize costs will systematically avoid 2-3% card interchange fees when L2 stablecoin transactions cost fractions of a cent
- Security remains a full-stack problem: every on-chain transaction is public by default (broadcasting portfolio strategies), RPC nodes see every query before execution, network-layer IP analysis can deanonymize users, and wallet interfaces leak device characteristics
- Prompt injection poses new attack vector: malicious actors can poison ENS records or contract metadata to inject instructions like "send all funds to attacker's wallet"—entirely new class of attack requiring no phishing or malware
- Ethereum roadmap includes Kohaku SDK to embed privacy-preserving technology directly into wallets making shielded transactions the default, though gaps remain across the stack
- CROPS framework defines requirements: agents must be Censorship Resistant, Open-source, Private, and Provably Secure (via formal verification and ZK proofs) before they can be trusted with financial decisions
- Ethereum Foundation's dAI team led by Davide Crapis estimates that within 3-5 years, the majority of Ethereum traffic will come from machines, with the explicit goal of transforming Ethereum into global settlement layer for AI
- Ethereum's advantages are structural: no downtime since 2015, deep DeFi liquidity and composability (Aave, Uniswap, Chainlink, Morpho in single transaction chain), and standards convergence that no single entity controls
- Near-term outcome likely involves multiple winners: L2s for high-frequency x402 micropayments where fees are negligible, mainnet as security anchor for high-value transactions requiring human supervision, with privacy and fees improving per roadmap
Decoder
- x402: HTTP 402-based payment standard that embeds payment gates directly into web communication, letting machines negotiate and settle payments in a single request-response cycle
- ERC-8004: Ethereum standard extending Agent-to-Agent protocol with on-chain identity (ERC-721 tokens), reputation (verified feedback), and validation (ZK/TEE attestations) registries
- ERC-8183: Ethereum standard defining a Job primitive with escrow and evaluation for agent commerce, covering the lifecycle from task creation through delivery verification to payment release
- ERC-8211: Ethereum standard for dynamic execution that lets agents adapt multi-step DeFi strategies to live on-chain conditions with constraint guards
- Facilitator: In x402, the entity that handles settlement on-chain but never custodies funds—agent authorizes what to pay, facilitator handles how
- Shared Payment Tokens (SPTs): Stripe's approach giving merchants limited authorization to charge a payment method via their preferred infrastructure while maintaining fraud controls
- CROPS: Framework requiring AI agents to be Censorship Resistant, Open-source, Private, and Provably Secure before handling financial decisions
- Prompt injection: Attack vector where malicious data in external sources (ENS records, price feeds) can override an agent's instructions and redirect funds
- RPC layer: Remote Procedure Call nodes that see every blockchain query before it becomes a transaction, collecting contract details and IP addresses
- EVM: Ethereum Virtual Machine—the runtime environment for smart contracts, compatible across Ethereum and many Layer 2 networks
- Kohaku: Ethereum SDK in development to embed privacy-preserving technology directly into wallets, making shielded transactions the default
Original article
Three EVM standards are converging into permissionless financial rails for AI agents: x402 (HTTP 402-based micropayments with 50M+ transactions since its May 2025 launch), ERC-8004 (on-chain identity and reputation with roughly 98K agent registrations across 10+ chains), and ERC-8183 (a job/escrow primitive co-developed by Virtuals and the Ethereum Foundation dAI team). Base handles the majority of x402 volume, and ERC-8211 extends the stack with dynamic execution for multi-step DeFi strategies. TradFi infrastructure is targeting the same problem from the off-chain side, with Visa's agent card CLI and Stripe/Tempo's Machine Payments Protocol backed by Anthropic, OpenAI, DoorDash, and Shopify as launch partners, while unresolved challenges around prompt injection, RPC data leakage, and on-chain transaction visibility remain active risk vectors for the space.