The Agent Payment Stack Is Being Built in Public
The week's clearest signal: the plumbing for AI agents to hold and move money is arriving faster than the rules for what happens when they misbehave.
- Cloudflare announced a tool letting businesses charge AI agents in stablecoins, per Fortune. That's a payments rail for a customer class that has no ID, no credit history, and no legal personhood.
- Robinhood brought agents directly into its app at its HOOD Summit, not just via its external Trading MCP. In-app agents get a marketplace of subscribable data: Token Terminal for crypto fundamentals, Quiver for government activity, Unusual Whales for options flows, Nasdaq for positioning, plus weather, satellite imagery, and social chatter (Bankless).
- CoinDesk's Long & Short column framed the real question: identity, provenance, and settlement. An agent that can analyze markets but can't hold, exchange, or settle assets is "inherently limited."
"Programmable intelligence plus programmable assets" is a great pitch. It's also the exact sentence that preceded several previous cycles' worth of vaporware. CoinDesk's own caveat is the useful part: convergence does not mean every AI-adjacent token deserves a premium.
The Fraud Problem Nobody's Priced In
A new arXiv paper, Agentic Commerce Bench, is the most sobering thing in this batch. It catalogs 20 fraud classes built from production aggregates, 1,647 service operations, and 1,068 settlements — and finds that six involve a counterparty that is exactly who it claims to be.
That's the ugly part. No identity check catches a legitimately-registered merchant simply overcharging an agent.
- A widely used agent security scanner scored zero on all four reasoning-observable classes, while correctly scoring 1.0 on a jailbreak control.
- Median measured payment: $0.007. One human review costs 143x the payment it examines.
So the economics of human oversight are already broken at the micro-transaction level. Anyone selling "agent guardrails" should be asked which of the 20 classes they actually catch.
Robinhood's Agent Ambitions, Minus the Crypto Fanfare
Robinhood's summit delivered weekend stock trading, expanded margin, and longer options hours — but crypto took a back seat, per Bankless.
- Perps are rolling out to U.S. users: up to 10x on BTC and ETH, up to 3x on SOL, XRP, HYPE and others.
- The routing surprise: perps run through Bitstamp, not Lighter, sending LIT down ~17% in under an hour.
- CoinMarketCap and TradingView both headlined the AI agents angle, which tells you where the narrative gravity is.
Robinhood owning research → thesis → execution is a coherent pitch. It's also a reminder that "agentic trading" currently means a better-sorted data feed, not autonomy.
Meanwhile, the Boring Infrastructure Keeps Shipping
- Open USD (OUSD) went live, backed by Coinbase, Mastercard, Shopify, Stripe and Visa, issued by Stripe-owned Bridge, with reserves at BlackRock, Lead Bank and BNY and monthly attestations. Mints and burns 1:1 at zero fees, natively on Ethereum, Solana, Base and Tempo (Unchained, Bankless, CoinDesk).
- The twist: nearly all reserve yield goes to distributors, not the issuer. Bankless calls it what it is — if it sticks, the stablecoin wars become a bidding war for distribution.
- Base activated its Cobalt upgrade: Validity Transactions (conditional, private-until-included swaps) plus B20 issuer controls combining KYC allowlists and sanctions blocklists (The Block, CoinTelegraph).
- Bloomberg added an onchain stablecoin dashboard to its Terminal, powered by Allium, covering stablecoins above $100M circulation — over 98% of the market (CoinTelegraph).
Note the pattern: the tokenized-finance crowd is quietly building compliance rails while the agent crowd is still arguing about whether an agent can sign a contract. Both are converging on the same question — who's accountable.
The Bitget Aftermath: Privacy Pools and Finger-Pointing
- The Bitget attacker moved about 2,700 ZEC (~$3.8M) into Zcash's Ironwood shielded pool, roughly one-seventh of the stolen ZEC, per ZachXBT (Decrypt).
- Near Intents says it rejected over $50M in swaps tied to the hack; Thorchain declined Bitget's request to block the attacker's addresses.
- Bitget puts the theft at $387.5M, says its Protection Fund reached $309M, and expects full withdrawals Friday. CEO Gracy Chen and Elliptic point to North Korea; no government has confirmed it (CoinTelegraph, Decrypt).
A $309M protection fund against a $387.5M hole is not a rounding error. It's a math problem wearing a press release.
Odds and Ends
- CFTC sent the White House two rules redrawing the "swap" definition around event contracts — one including them, one excluding "casino-style gambling products" (Decrypt, The Block). The jurisdictional fight is likely Supreme Court-bound.
- Bitcoin ETFs logged a ninth straight day of net inflows, $66.19M on Sept. 29, with the Sept. 17–29 run totaling about $3.08B (Decrypt).
- OpenAI and Google signed an AI safety pact as attacks hit software, including bitcoin, per CoinDesk. Separately, OpenAI alleges individuals associated with Moonshot AI ran a coordinated model-distillation campaign starting early July (Bloomberg via Techmeme).
- The Dutch government plans a capital gains tax from 2028, realized-gains based, replacing its assumed-yield system (Bitcoin Magazine).
- TD Cowen says bitcoin is "evolving from an asset into a capital markets ecosystem" (Bitcoin Magazine).
Closing Take
The agent economy is being assembled out of stablecoin rails, data marketplaces, and conditional transactions — genuinely useful primitives. What's missing is the liability layer, and the Agentic Commerce Bench paper suggests it's missing badly. Watch the infrastructure solving real problems (payments, identity, settlement, custody) and stay skeptical of anything priced on the word "agent" alone. We've seen this movie, and the sequel has better branding.
Not financial advice. Do your own research, ideally not via an autonomous agent.