News · DiggingBeagle record

Production wallet-agent failure motivates invariants for irreversible actions

A production wallet agent retried a 200 USDT to BTC swap after a false failure signal; both Ethereum transactions later landed, doubling the intended spend to 400 USDT.

Published
Aug 1, 2026

The report

A production wallet-agent failure described in an August 2026 paper shows why irreversible actions need stronger invariants than "retry on error." On April 30, an agent attempted a 200 USDT to BTC swap. Its executor reported failure, so the agent retried.

Both Ethereum transactions eventually landed, three minutes apart. The user therefore spent 400 USDT instead of the intended 200.

The incident did not require a smart-contract vulnerability. It was a coordination failure between execution feedback and irreversible state. The paper uses the event to motivate explicit invariants around identity, authorization, replay, confirmation and bounded delegation.