A critical vulnerability in the x402 SDK could allow malicious APIs to drain token balances from AI agents, according to a report in The Hacker News. The flaw potentially exposes AI systems relying on the SDK to unauthorized fund transfers and financial exploitation.