Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents' Token Balances

A severe security flaw in x402 SDKs allowed malicious APIs to drain the entire token balance of paying AI agents. Because the default client lacked a spending limit, agents could unintentionally authorize large payments to malicious endpoints. Administrators are urged to update the SDK immediately to versions released after mid-August that enforce proper spending controls.