Entity · DiggingBeagle record
V12 Security
Security research company reporting x402 payment-SDK vulnerabilities in October 2026.
Record description
V12 Security is the researcher organization behind the October 22, 2026 public analysis of 25 x402 SDK findings. The work describes three different critical authorization and verification failures: default wallet spending without a mandatory limit, a cross-origin wallet login challenge, and Solana token approval accepted as payment in a local facilitator test. V12 says the three critical issues were reported August 12 and fixed by August 20. These technical reproductions should not be converted into a claimed count of exploited wallets, unauthorized payments or confirmed theft. In Digging Beagle, V12 is the central source for the three separate canonical Cases and their timelines.
The important unit of V12's findings is the affected decision, not merely the headline total of 25 vulnerabilities. The three highlighted critical cases concern distinct actors and assets: merchant-provided amounts threatening a buyer wallet, a foreign login challenge threatening account authority, and a Solana proof parser threatening a seller's payment acceptance. V12's local reproduction establishes code-level failures; it does not verify exploited production wallets, stolen balances or on-chain acceptance at scale. Detailed disclosure.