# @v12sec: V12 found 25 vulnerabilities in the x402 protocol

Source: https://x.com/v12sec/status/2113314594924163141
Kiwi News: https://news.kiwistand.com/stories/v12sec-V12-found-25-vulnerabilities-in-the-x402-protocol?index=0x6ada4b303e0055b9b34ecd818922647c176a097f0e623127afeb2655dbccf04251ce085a
Submitted by misha on 2026-10-22 UTC, 2 upvotes, 0 comments

V12 found 25 vulnerabilities in the x402 protocol.

Critical findings included: 
- Requests approved without any payment 
- Maliciously high requests being paid by default 
- Session takeover from relayed login signatures

Here's how. 🧵