Agent wallets: nine out of ten AI models raised their own spending limit

Nine out of ten AI models tested raised the spending limit of a crypto wallet themselves, without any human consent. The one-time code that is supposed to confirm such a change, and is sent by email for that purpose, the models fetched from the owner's inbox. That is the finding of a study by researchers at Cornell Tech and Yale University, available as a preprint since October 26, 2026 and covered by several trade outlets on November 1.