Baret

MetaMask 🦊 Verified account @MetaMask · Sep 8

if your AI agent wallet could do anything, what would you have it do?

View quoted post on X

Casper @Casper_Network · Sep 1

Letting agents pay for things was always going to create problems.

Baret is a Casper wallet that simulates every transaction before you sign it.

To show what Casper catches, they built six fake dApps with real attacks inside.

Five are scams you'd recognise. The sixth is an agent spending a little more each time, which nobody was worrying about five years ago.

Let's dive into one of the finalists in the Casper Agentic Buildathon.

The six traps

1. NovaSwap. A DEX clone. A hidden instruction sends your tokens to a stranger.

2. PixelDrop. An NFT mint that quietly drains every token you hold.

3. OrbitYield. Liquid staking at 14%, with no unstake path. Money goes in only.

4. ClaimHub. An airdrop claim whose "eligibility check" signs away your stablecoins.

5. LaunchPad. A token launch where the dev kept mint authority and the liquidity isn't locked.

6. Scrybe. An AI service charging per answer over x402, testing whether your wallet caps an agent's spend.

What happens when you press sign

- A server simulates the unsigned transaction

- 25+ detectors run against it

- You get one sentence explaining what's wrong

- You sign with your eyes open, or you reject

Why the last one matters

The first five have someone trying to rob you. The sixth doesn't.

Scrybe is a legitimate service charging a fair price, and the agent paying it is doing exactly what it was told.

Which is why the limit has to be a rule the wallet enforces, rather than a judgement someone makes in the moment.

View quoted post on X