Between May 2025 and April 2026, autonomous AI agents executed 176 million on-chain payments totaling $73 million, according to a joint report by Keyrock, Coinbase, Tempo, and Virtuals published in May 2026. The average transaction settled at approximately $0.48, with 98.6% denominated in USDC. S...
"Crypto rails are becoming the default payment layer for AI agents." — Kevin de Patoul, CEO, Keyrock
Between May 2025 and April 2026, autonomous AI agents executed 176 million on-chain payments totaling $73 million, according to a joint report by Keyrock, Coinbase, Tempo, and Virtuals published in May 2026. The average transaction settled at approximately $0.48, with 98.6% denominated in USDC. Seventy-six percent of those transactions fell below Visa's $0.30 fixed-fee threshold — a structural incompatibility with legacy card networks that is pushing machine-to-machine commerce onto stablecoin rails by default.
The data describes an emerging financial layer where software, not humans, initiates and settles payments. More than 104,000 AI agents were registered across 15+ directories by Q1 2026, a 300% increase from Q4 2025. Amazon Web Services moved its Bedrock AgentCore Payments service to general availability in August 2026, embedding Coinbase and Stripe wallet infrastructure directly into its enterprise AI platform. The economic value at stake is substantial: over $8 billion in acquisitions have targeted agent-payment infrastructure in the past twelve months, and agentic AI investment reached $8.1 billion across 80 tracked rounds in 2026 alone — a roughly 25-fold increase year over year from 2025.
This report examines the protocols, infrastructure, security risks, and economic dynamics of the autonomous agent payment stack as it scales from experimental to production.
An AI agent cannot sign up for a SaaS account, enter credit card details, or negotiate an enterprise contract. It needs a payment method native to the web's request-response model that settles in seconds and requires no pre-existing relationship between buyer and seller. Traditional payment networks are structurally mismatched with this requirement.
According to the Keyrock report, 76% of AI agent transactions settled below $0.30 — Visa's fixed interchange fee floor. At an average of $0.48 per transaction, card networks would consume 62% or more of the payment value in fees alone. Stablecoin rails on Layer 2 networks like Base settle in approximately 200 milliseconds with fees measured in fractions of a cent, making them economically viable for micropayments at scale.
The transaction pattern is distinctive. Agents pay for API access, data queries, compute resources, and other agents' services in real time, with no human in the loop. This is not a theoretical model. The 176 million transactions recorded from May 2025 to April 2026 were real settlements — overwhelmingly in USDC — for services consumed by autonomous software. The average deal size of roughly $0.31 to $0.48 (depending on the measurement period) reflects a payment profile that has no economic precedent in legacy finance.
By Q1 2026, over 250,000 on-chain AI agents were active daily, a 400% increase year-over-year, according to aggregated blockchain data. These agents are purchasing data feeds, cloud compute, model inference, and increasingly, services from other agents.
Two protocol standards have emerged as the foundational layer for agent payments.
x402: HTTP-Native Stablecoin Payments. Developed by Coinbase and co-governed with Cloudflare through the x402 Foundation, the x402 protocol revives HTTP status code 402 (Payment Required) to embed stablecoin payments directly into web requests. The flow: a client requests a resource; the server responds with HTTP 402 and payment instructions; the client constructs a payment payload; a facilitator verifies and settles the payment; and the resource is returned. No subscriptions, no accounts, no lock-in.
As of March 2026, x402 had processed over 119 million transactions on Base and 35 million on Solana, handling roughly $600 million in annualized volume with zero protocol fees. Supported stablecoins include USDC and EURC on EVM chains (via EIP-3009) and SPL USDC on Solana. The protocol currently operates across Base, Ethereum, Arbitrum, Polygon, and Solana.
The existing report on x402 from this publication (September 9, 2026) documented 195 million transactions through the protocol's API hub. The data suggests continued acceleration.
ERC-8004: On-Chain Agent Identity. Ratified in January 2026 and deployed to Ethereum mainnet in February, ERC-8004 was co-authored by engineers from MetaMask, the Ethereum Foundation, Google, and Coinbase. The standard defines three on-chain registries: an Identity Registry (ERC-721 NFT serving as the agent's passport), a Reputation Registry (verified feedback and track record), and a Validation Registry (cryptographic proof of task correctness).
Within the first month of mainnet deployment, more than 45,000 AI agents had registered. Registration costs on Layer 2 networks remain under $1 per agent. The standard provides the identity and accountability layer that the academic literature identifies as a prerequisite for scalable agent-to-agent commerce — without it, agents cannot verify counterparties or build trust.
A June 2026 arxiv paper from UCL's Institute of Finance & Technology formalized this as "agent-to-agent finance," defining a four-stage lifecycle: discovery, authorization, execution, and accounting. A companion systemization paper identified key unresolved challenges including weak intent binding, misuse under valid authorization, and limited accountability.
The enterprise stack has moved from pilot to production. Amazon Bedrock AgentCore Payments, built in collaboration with Coinbase and Stripe, launched in preview in May 2026 and reached general availability in August 2026. The service gives developers a managed path to deploy AI agents that can autonomously pay for APIs, Model Context Protocol (MCP) tools, and paywalled web content.
The architecture: end users fund an agent's wallet through card payments or USDC and grant delegation for the agent to spend on their behalf. Coinbase's x402 discovery layer and wallet infrastructure are natively integrated, with instant USDC settlement on Base and Solana. Security includes spending limits, compliance checks, and transaction visibility, with credentials stored in AgentCore Identity Secrets Manager — the agent itself never sees raw credentials.
Coinbase launched dedicated AI agent accounts in June 2026, enabling agents to trade and spend autonomously. BNB Chain unveiled its Agent Studio in July 2026, built on AWS Bedrock, allowing developers to deploy autonomous on-chain agents in approximately 15 minutes. Each agent mints a unique identity NFT, accrues a reputation score, and becomes discoverable within the agent network.
The acquisition pattern underscores the strategic importance. Capital One acquired Brex for $5.15 billion, Mastercard purchased BVNK for $1.8 billion, and Stripe acquired Bridge for $1.1 billion. These three deals alone represent over $8 billion deployed in twelve months to secure positions in the payment stack that agents are increasingly using.
Olas (Autonolas) provides the most granular on-chain dataset for agent activity. As of September 6, 2026, Olas agents had executed 20,451,912 total on-chain transactions across all supported chains, with 14,589,702 agent-to-agent transactions across 6 chains where the Mech Marketplace is deployed (Ethereum, Gnosis, Arbitrum, Optimism, Base, and Polygon).
Gnosis Chain dominates with 18,077,254 transactions, representing 96.4% of tracked activity as of August 2026. Olas-powered AI agents trading on prediction markets account for over 75% of Safe (multisig wallet) transactions on Gnosis Chain on many days. The 7-day average of daily active Olas agents stood at 425 unique multisigs as of September 6, 2026.
This concentration reveals an important dynamic: agent activity currently clusters around prediction markets and data-service arbitrage rather than general commerce. The value being exchanged is real — agents are paying other agents for inference, data retrieval, and prediction services — but the use case diversity remains narrow. Expansion into broader API commerce, content licensing, and infrastructure procurement is the next phase the Keyrock data suggests is beginning.
The security surface of autonomous agents holding and transacting on-chain assets is large and poorly mapped.
In April 2026, the Lazarus Group drained approximately $575 million from DeFi in 18 days through two structurally different attacks: $285 million from Drift Protocol on Solana (April 1) and $292 million from Kelp DAO (April 18). While these exploits targeted protocol infrastructure rather than agent wallets directly, they exposed the fragility of the systems agents increasingly depend on.
Agent-specific attack vectors are emerging. In May 2026, the Grok/Bankrbot incident demonstrated prompt injection via an NFT: an attacker sent an NFT to a Grok-controlled wallet, then replied to a Grok thread with a Morse code message that triggered Bankrbot to transfer approximately 3 billion DRB tokens to an attacker's address. In July 2026, security researchers at NSFOCUS disclosed JadePuffer, described as the first fully AI-agent-driven ransomware attack observed end to end.
The core vulnerability is architectural. Spending limits enforced in a model's system prompt are suggestions that prompt injection can bypass. According to multiple security researchers and the Ledger security team, spending limits must be enforced at the wallet or custody infrastructure layer, not inside the model. AWS's AgentCore Payments addresses this by storing credentials in a separate secrets manager, but many open-source and experimental agent deployments lack equivalent protections.
Analysts estimate autonomous AI agents will manage more than $50 billion in on-chain assets by 2027. The gap between the capital at risk and the maturity of agent-specific security tooling is widening, not narrowing.
The agent payment stack redistributes economic value in ways that diverge from traditional payment flows.
Who captures value today:
Who loses value:
The $73 million in total agent settlements over 12 months is modest. But the 176 million transaction count, the 25-fold year-over-year increase in agentic AI investment ($8.1 billion in 2026 vs. $324 million in 2025), and the enterprise infrastructure now in production suggest this is an early-stage growth curve, not a plateau.
The data describes a payment layer that is forming around structural limitations of existing infrastructure. Card networks cannot economically process $0.31 transactions. SaaS billing cannot handle per-request, real-time settlement from anonymous software counterparties. Traditional identity systems cannot issue credentials to autonomous code.
Stablecoin rails, HTTP-native payment protocols, and on-chain identity registries are filling these gaps — not because of ideological preference for decentralization, but because the technical requirements of machine-to-machine commerce demand it. The $73 million in annual agent settlements is small against the $46 trillion stablecoin market. The 176 million transaction count is not.
The open questions are security and regulation. Agents that can spend money autonomously can be tricked into spending it incorrectly. The infrastructure to prevent that — wallet-level spending limits, cryptographic task validation, reputation-weighted authorization — exists in specification but is unevenly deployed. The regulatory status of an AI agent that holds a wallet, signs transactions, and pays counterparties remains undefined in every major jurisdiction.
What is clear from the data: the payment layer for AI agents is being built on crypto rails, and the economics of micropayments ensure that legacy alternatives cannot compete on cost. Whether this layer can be built securely and governed appropriately is the question the next 12 months will answer.