AI agents executed 176 million on-chain transactions totaling $73 million between May 2025 and April 2026, according to Keyrock research data. The infrastructure enabling those transactions — specialized wallets, payment protocols, and security guardrails — has become the fastest-moving product c...
"We don't want AI agents running around with private keys. We want users to set the rules, and agents to follow them." — MetaMask product team, Agent Wallet launch announcement, August 6, 2026
AI agents executed 176 million on-chain transactions totaling $73 million between May 2025 and April 2026, according to Keyrock research data. The infrastructure enabling those transactions — specialized wallets, payment protocols, and security guardrails — has become the fastest-moving product category in crypto. MetaMask launched Agent Wallet on August 6, 2026. Coinbase's x402 protocol has processed over 165 million transactions across 480,000 registered agents. MoonPay shipped an open-source wallet standard backed by PayPal, the Ethereum Foundation, and 15 other organizations.
The core question is no longer whether AI agents will transact on-chain. They already do. The question is who controls the wallet layer, what security model prevails, and how much economic value flows through agent-mediated infrastructure versus human-directed wallets. As of August 2026, no single standard dominates, and the category has already produced its first $45 million in security incidents.
Six major wallet providers — MetaMask, Coinbase, MoonPay, OKX, Ledger, and BitGo — now offer some form of agent-facing wallet infrastructure. Each approaches the problem differently. MetaMask provides a self-custodial wallet with user-defined spending limits. Coinbase wraps keys in hardware-isolated Trusted Execution Environments (TEEs). Ledger supplies hardware-backed human approval for agent workflows. BitGo focuses on institutional custody and policy controls. MoonPay operates a non-custodial software layer with CLI access. OKX offers developer tooling integrated with its exchange infrastructure.
The fragmentation is intentional: each vendor is betting that its particular trust model — self-custody, hardware isolation, hardware approval, or institutional policy — will become the default for different market segments. No interoperability standard has yet achieved critical mass, though MoonPay's Open Wallet Standard, launched in March 2026, is the most ambitious attempt.
The addressable market, according to industry projections, is substantial. The agentic payment market is projected to grow from $7 billion in 2025 to $93 billion by 2032, driven primarily by micropayment volume that legacy payment systems cannot serve efficiently. As of 2026, over 2.3 million AI agents are estimated to be operating in the crypto ecosystem, though the vast majority are not yet transacting autonomously.
MetaMask opened its Agent Wallet to all users on August 7, 2026, following an early-access phase with approximately 200 users. The product supports 12 networks, including EVM chains, Solana, and Hyperliquid.
The wallet offers two operating modes:
Guard Mode restricts agents to allowlisted protocols, enforces daily spending limits, and requires two-factor authentication (2FA) for any action outside the user's predefined policy.
Beast Mode permits trading with any protocol. Malicious transactions are still blocked and escalated for 2FA approval, but the agent otherwise operates with broader autonomy.
Both modes run every transaction through a three-layer security stack: simulation, Blockaid threat scanning, and MEV protection. MetaMask offers up to $10,000 per month in loss coverage for eligible transactions. When an agent initiates a transaction, push notifications go to the user's email or MetaMask mobile app. Users have five minutes to approve or reject before auto-decline.
Compatible AI frameworks include Claude Code, Codex, OpenClaw, Hermes, OpenCode, and Cursor. Agents can execute swaps, open perpetual positions, and place bets on prediction markets.
MetaMask holds approximately 26% of the crypto wallet market share. Whether that installed base translates into agent wallet adoption is an open question. The company has not disclosed transaction volumes or active agent counts since the public launch.
Coinbase's x402 protocol occupies a different layer of the stack. Rather than providing the wallet itself, x402 is a payment protocol that lets AI agents pay for web resources — API calls, data feeds, compute — using stablecoins. The protocol repurposes the HTTP 402 status code, originally reserved for "Payment Required" but rarely implemented in practice.
As of late April 2026, Coinbase reported 69,000 active agents, 165 million settled transactions, and approximately $50 million in cumulative volume on x402. Total registered agents reached 480,000, though the gap between registered and active agents — roughly 86% dormancy — indicates significant experimental churn.
Coinbase expanded x402 in April 2026 with the launch of Agent.market, a directory of x402-paywalled services. The protocol is backed by a coalition including Cloudflare, Circle, Stripe, and Amazon Web Services.
x402 keys sit inside hardware-isolated TEEs. The agent never directly handles private keys. This architecture reduces key-theft risk but introduces infrastructure dependencies on Coinbase's TEE implementation.
The protocol's economics are straightforward: agents pay per-request using USDC. Average transaction values are small — the $50 million across 165 million transactions implies an average payment of roughly $0.30. This is a micropayment protocol, not a trading protocol. Its economic significance lies in volume, not ticket size.
MoonPay launched MoonPay Agents in February 2026 — a non-custodial software layer giving AI agents wallet access and autonomous transaction capability via CLI. The following month, MoonPay released the Open Wallet Standard (OWS), an open-source framework providing agents with a universal interface for holding funds, signing transactions, and interacting with blockchains.
OWS launched with contributions from over 15 organizations: PayPal, OKX, Ripple, Circle, Tron, TON Foundation, Solana Foundation, Ethereum Foundation, Base, Polygon, Sui, Filecoin Foundation, LayerZero, Dflow, Uniblock, Virtuals, Arbitrum, Dynamic, Allium, Simmer.Markets, and Circle. The breadth of the contributor list suggests industry recognition that standardization is needed, though backing a standard and adopting it in production are different commitments.
MoonPay integrated Ledger hardware wallets for agent transactions, creating a model where AI agents propose actions and human users approve them via hardware device. This hardware-in-the-loop approach sacrifices agent autonomy for security — the opposite tradeoff from MetaMask's Beast Mode.
Prior to OWS, no shared standard existed for how AI agents interact with wallets. In Q1 2026, over 340,000 on-chain wallets were held by AI agents, each operating under ad hoc integration patterns.
The aggregate data paints a picture of a category that is real but early:
Agent transaction volumes are volatile. Daily transactions peaked at 731,000 in December 2025 and dropped 92% to 57,000 by February 2026 — a pattern consistent with speculative cycles rather than steady infrastructure adoption.
For context, these figures are marginal relative to overall DeFi activity. Uniswap alone processes billions in daily volume. Agent-mediated transactions remain a rounding error in total on-chain activity, though the infrastructure buildout suggests providers expect that ratio to change.
Protocol-level vulnerabilities in AI agent systems triggered over $45 million in security incidents in 2026, according to KuCoin research. Attack vectors differ fundamentally from traditional DeFi exploits:
Memory poisoning: Attackers target the long-term memory of AI agents, injecting false instructions that agents later treat as legitimate. Security researchers documented 26 routers secretly injecting malicious tool calls, resulting in the theft of $500,000 from a single client wallet.
Social engineering via NFTs: In May 2026, an attacker drained $175,000 from a wallet linked to Grok's X account. The attack chain involved a gifted NFT that silently unlocked transfer permissions, followed by a Morse code message decoded and publicly posted by Grok, which a trading bot interpreted as an authenticated instruction.
Autonomy overreach: McKinsey found that 80% of organizations observed risky AI agent behaviors including unauthorized data exposure and privilege escalation. When agents operate without human-in-the-loop review, a single manipulated instruction can execute to completion.
These attack patterns are new to crypto. Traditional DeFi exploits target smart contract logic or bridge infrastructure. Agent exploits target decision-making processes — a softer, harder-to-audit surface.
The security implications are structural. Giving an AI program direct control of a private key means a leaked key results in immediate, irreversible loss. MetaMask's dual-mode approach and Coinbase's TEE architecture represent different mitigation strategies, but neither eliminates the fundamental risk of autonomous financial actors.
| Provider | Model | Key Storage | Agent Autonomy | Target User | |----------|-------|-------------|----------------|-------------| | MetaMask | Self-custodial wallet | User-held | High (Beast Mode) to Low (Guard Mode) | Retail traders, developers | | Coinbase | x402 payment protocol | TEE-isolated | Micropayments only | API consumers, developers | | MoonPay | Non-custodial + OWS | Software / Ledger hardware | Medium (hardware approval) | Developers, institutions | | Ledger | Hardware approval layer | Hardware device | Low (human-in-the-loop) | Security-focused users | | BitGo | Institutional custody | Multi-sig / policy engine | Policy-bounded | Institutions | | OKX | Developer tooling | Exchange-integrated | Variable | Exchange users, developers |
No single vendor controls the full stack. MetaMask owns the wallet interface. Coinbase owns the payment protocol. MoonPay is attempting to own the standard. Ledger owns the hardware trust anchor. This fragmentation creates integration overhead but also reduces single-point-of-failure risk for the ecosystem.
The AI agent wallet category has moved from concept to shipped product in under 12 months. MetaMask, Coinbase, MoonPay, Ledger, and others have deployed competing infrastructure, and agents are transacting on-chain in measurable volumes. The $73 million in agent-settled transactions over the past year is small relative to DeFi totals but large enough to attract serious infrastructure investment.
Three unresolved questions will determine whether agent wallets become a significant economic layer or remain a niche feature. First, which security model prevails — full autonomy (Beast Mode), hardware-gated approval (Ledger), or TEE isolation (Coinbase) — will shape adoption patterns and loss rates. Second, whether the Open Wallet Standard or a competing protocol achieves sufficient adoption to reduce integration friction. Third, whether agent transaction volumes grow steadily or remain subject to the speculative boom-bust cycles that characterized Q4 2025–Q1 2026.
The infrastructure is live. The economic question is whether non-human wallets generate enough transaction volume and fee revenue to justify the capital being deployed to serve them.