Research · curated 30 Jul 2026
Protocol-Level Attacks on Agentic Commerce Platforms: A Cross-Platform Taxonomy, AIP-Bench, and Unified Defense
First reported · updated · 2 reports arxiv.org
Coverage timeline
Why it matters
Protocol-layer flaws in agentic commerce platforms enable model-independent, 100%-success payment hijacks that no model alignment or upgrade can fix, exposing systems that already move real money.
A research paper, 'Protocol-Level Attacks on Agentic Commerce Platforms,' documents 33 structural vulnerabilities across three production agentic commerce platforms that let attackers deterministically hijack agent-driven payments (e.g. redirecting escrow to an attacker's Solana wallet via malicious service descriptions), independent of which underlying model runs. The authors contribute a taxonomy separating structural from semantic attacks, AIP-Bench (a deterministic agentic-commerce security benchmark), and PCAT, a platform-agnostic defense that reduces structural attack success to zero for four of five classes.