The pitch is simple enough to fit on a slide: give an AI agent a wallet, and it can pay for the things it needs — data, compute, API calls — without a human approving each transaction. Machine-speed commerce with machine-speed settlement. Crypto's payment rails happen to be the only ones that let software open an account without a bank's permission.
Where the idea is actually good
Strip away the token announcements and three use cases hold up.
Micropayments between machines
Card networks can't process a tenth of a cent economically. On-chain rails can. Agents paying each other tiny amounts for data or inference is a real problem with a real fit, and it's the version of this that most resembles a business rather than a narrative.
Verifiable provenance
As synthetic content becomes indistinguishable from real, cryptographic signatures attesting to what a model produced and when become genuinely valuable. This is unglamorous infrastructure, which is usually a good sign.
Decentralized compute markets
Matching idle GPUs to workloads via an open market is a legitimate coordination problem. Whether these markets beat hyperscalers on price and reliability is unproven — but the problem is real and the design is coherent.
The new attack surface
Here's the part the pitch decks skip. An agent with a wallet is a program that can lose your money at machine speed, and the failure modes are unfamiliar.
- Prompt injection with financial consequences. If an agent reads web pages or messages and can also sign transactions, hostile text on a page becomes an attempt to instruct your wallet. This isn't theoretical — it's the same class of attack that already works on browsing agents, only now the payload is a transfer.
- Unlimited approvals at scale. Agents that need to transact repeatedly tend to be granted broad approvals so they don't stall. Broad approvals are exactly what drainers exploit.
- No chargeback, no undo. A mistaken agent transaction is final. There's no dispute process, and the counterparty may be another agent that has already spent it.
- Opaque delegation. When an agent hires another agent, your risk surface now includes software you never evaluated.
If you're going to use one
- Fund a dedicated wallet with a strict budget. Never connect an agent to your main holdings.
- Use spending limits and time-boxed approvals rather than unlimited ones.
- Require human confirmation above a threshold you'd be annoyed to lose.
- Log every transaction and review the log — agents fail quietly and consistently.
- Assume any agent that reads untrusted input can be manipulated by that input.
The honest read
AI and crypto genuinely fit at exactly one seam: software needs to pay for things, and crypto is the only payment system software can join unassisted. That seam is narrow and real. Nearly everything else being sold as AI×crypto right now is a token attached to a product that would work fine without one. Judge each project by that single question, and the sector gets much easier to navigate.