Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
Malware / Trojaner / VirenAI Agents Are Becoming a New Malware Distribution Channel(23.09.2026 um 09:44 Uhr)
Sichere ProgrammierungBuilding In-Browser Private Tools: When the Server Is the Liability(23.09.2026 um 08:54 Uhr)
Sichere ProgrammierungYour Order Fulfillment Workflow Is One 24-Hour Wait Away From Chaos(23.09.2026 um 08:54 Uhr)
Sichere Programmierungflet media library(23.09.2026 um 08:54 Uhr)
Sichere ProgrammierungRunning Lightdash on Snowpark Container Services(23.09.2026 um 08:55 Uhr)
Sichere ProgrammierungThe Impossible Filter Gallery Transition in CSS Only(23.09.2026 um 08:59 Uhr)
Sichere ProgrammierungVerifiable Data > Claimed Data: What i'm Trying to do with Ori's List(23.09.2026 um 09:08 Uhr)
Malware / Trojaner / VirenAI Agents Are Becoming a New Malware Distribution Channel(23.09.2026 um 09:44 Uhr)
Sichere ProgrammierungBuilding In-Browser Private Tools: When the Server Is the Liability(23.09.2026 um 08:54 Uhr)
Sichere ProgrammierungYour Order Fulfillment Workflow Is One 24-Hour Wait Away From Chaos(23.09.2026 um 08:54 Uhr)
Sichere Programmierungflet media library(23.09.2026 um 08:54 Uhr)
Sichere ProgrammierungRunning Lightdash on Snowpark Container Services(23.09.2026 um 08:55 Uhr)
Sichere ProgrammierungThe Impossible Filter Gallery Transition in CSS Only(23.09.2026 um 08:59 Uhr)
Sichere ProgrammierungVerifiable Data > Claimed Data: What i'm Trying to do with Ori's List(23.09.2026 um 09:08 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

400,000 Agents Hold Wallets. Zero Have Wallet-Agnostic Governance. That Is the Vendor Lock-In Nobody Talks About.

Circle Agent Wallets. Coinbase Agentic Wallets. Crossmint. thirdweb. MetaMask. Cobo. Six wallet providers, six different policy engines, six different governance models. Your agent picks one and inherits that vendor's rules for…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

Circle Agent Wallets. Coinbase Agentic Wallets. Crossmint. thirdweb. MetaMask. Cobo. Six wallet providers, six different policy engines, six different governance models. Your agent picks one and inherits that vendor's rules for life.



Circle reports 400,000+ agents with on-chain purchasing power. 140 million payments settled in USDC over nine months. The agent economy is real. But governance is fragmented across wallet vendors, creating a lock-in problem that makes AWS vendor lock-in look trivial.



When your agent's governance rules are embedded in the wallet provider's SDK, switching wallets means rebuilding your entire compliance layer. That is not a technical migration. That is a regulatory risk event.



The Wallet Governance Fragmentation Problem



Each wallet provider bundles governance into their product differently:




# The wallet governance fragmentation landscape (July 2026)

wallet_providers = {
"circle_agent_wallets": {
"custody": "custodial", # Circle holds funds
"governance": "circle_policies",
"spending_limits": "per-session",
"audit_format": "circle_proprietary",
"multi_chain": False, # USDC on supported chains only
"migration_path": "none", # Locked to Circle infrastructure
"mica_compliance": "partial", # Circle handles some, you handle rest
},
"coinbase_agentic_wallets": {
"custody": "non-custodial_tee", # Keys in Trusted Execution Environment
"governance": "coinbase_policies",
"spending_limits": "per-transaction",
"audit_format": "coinbase_proprietary",
"multi_chain": True, # Base + Ethereum + others
"migration_path": "export_keys_manual",
"mica_compliance": "partial",
},
"crossmint": {
"custody": "non-custodial",
"governance": "crossmint_rules_engine",
"spending_limits": "programmable",
"audit_format": "crossmint_api",
"multi_chain": True,
"migration_path": "limited",
"mica_compliance": "minimal",
},
"self_custody_gnosis_safe": {
"custody": "self",
"governance": "none_built_in", # You build everything
"spending_limits": "custom_smart_contract",
"audit_format": "on_chain_raw",
"multi_chain": True,
"migration_path": "full_control",
"mica_compliance": "diy", # Entirely your responsibility
}
}

# The problem:
# - Each vendor has different governance rules
# - MiCA requires CONSISTENT governance regardless of wallet
# - Switching wallets = rebuilding compliance from scratch
# - Multi-wallet strategies = managing N different governance models

# What happens when you use Circle today and need Coinbase tomorrow:
def migrate_wallet(from_provider, to_provider):
tasks = [
"Export delegation chains (format incompatible)",
"Rebuild spending tier configurations",
"Recreate audit trail format mappings",
"Re-verify MiCA compliance records",
"Update all peer trust relationships",
"Re-register agent identity credentials",
"Migrate historical transaction records",
"Re-certify governance for NCA auditors"
]
estimated_time = "3-6 months"
regulatory_risk = "HIGH" # Gap in compliance during migration
return {"tasks": tasks, "time": estimated_time, "risk": regulatory_risk}






Wallet-Agnostic Governance: The Missing Layer



The governance layer should not live inside the wallet. It should sit above any wallet, providing consistent delegation, tiering, and audit regardless of which wallet holds the funds:




// Wallet-agnostic governance with rosud-pay
import { RosudPay, WalletAdapter } from 'rosud-pay';

// rosud-pay sits ABOVE the wallet, not inside it
const governance = RosudPay.configure({
agentId: 'procurement-agent-prod',
network: 'base-mainnet',

// Wallet adapter pattern: plug in ANY wallet
wallet: WalletAdapter.connect({
// Today: Circle Agent Wallet
provider: 'circle',
walletId: 'agent-wallet-001',

// Tomorrow: switch to Coinbase without changing governance
// provider: 'coinbase',
// walletId: 'cb-agent-wallet-001',

// Or self-custody:
// provider: 'gnosis-safe',
// address: '0x...',
}),

// Governance rules are INDEPENDENT of wallet provider
governance: {
delegation: {
// Same delegation model regardless of wallet
principal: 'did:rosud:finance-director',
scope: ['compute', 'data', 'saas'],
maxTransaction: 500.00,
validUntil: '2026-07-12T00:00:00Z'
},

tiers: [
{ name: 'autonomous', maxAmount: 1.00, approval: 'none' },
{ name: 'supervised', maxAmount: 50.00, approval: 'notify' },
{ name: 'collaborative', maxAmount: 500.00, approval: 'explicit' }
],

audit: {
// Consistent format regardless of wallet
format: 'mica-article-67',
retention: '5y',
ncaQueryable: true
}
}
});

// The governance layer produces identical outputs regardless of wallet:
const payment = await governance.pay({
amount: 47.00,
recipient: 'compute-provider.example',
category: 'compute'
});

// Same audit record whether funds came from Circle, Coinbase, or Gnosis Safe:
console.log(payment.auditRecord);
// {
// delegationId: 'del-2026-07-05-001', // Same
// tier: 'supervised', // Same
// withinScope: true, // Same
// approvalStatus: 'notified', // Same
// micaCompliant: true, // Same
// walletProvider: 'circle', // Only this changes
// txHash: '0x...', // Wallet-specific
// }

// Switch wallet without changing governance:
await governance.migrateWallet({
from: { provider: 'circle', walletId: 'agent-wallet-001' },
to: { provider: 'coinbase', walletId: 'cb-agent-wallet-001' },
preserveGovernance: true, // All rules, delegations, tiers preserved
preserveAuditHistory: true, // Complete history maintained
preserveTrustScore: true // Peer trust relationships intact
});
// Migration time: minutes, not months
// Regulatory gap: zero (governance never interrupted)






Why This Matters After MiCA



MiCA does not care which wallet your agent uses. It cares that governance records exist, that delegation is provable, that audit trails are machine-readable, and that risk management is proportionate. If your governance is embedded in your wallet provider's SDK, you have three problems:




  1. Vendor lock-in: Switching wallets means rebuilding compliance (3-6 months)

  2. Multi-wallet fragmentation: Agents that use multiple wallets have inconsistent governance

  3. Regulatory dependency: Your MiCA compliance depends on your wallet vendor's product roadmap




# The regulatory risk of wallet-embedded governance

def assess_regulatory_risk(governance_location: str):
if governance_location == "inside_wallet_provider":
return {
"vendor_lock_in": True,
"migration_compliance_gap": "3-6 months",
"multi_wallet_consistency": False,
"mica_audit_format": "vendor_specific", # May not satisfy NCA
"provider_shuts_down_risk": "total_governance_loss",
"provider_changes_rules_risk": "forced_compliance_rebuild",
"verdict": "HIGH_RISK"
}

if governance_location == "above_wallet_agnostic":
return {
"vendor_lock_in": False,
"migration_compliance_gap": "zero",
"multi_wallet_consistency": True,
"mica_audit_format": "standardized", # Always satisfies NCA
"provider_shuts_down_risk": "swap_wallet_keep_governance",
"provider_changes_rules_risk": "irrelevant_governance_independent",
"verdict": "LOW_RISK"
}

embedded = assess_regulatory_risk("inside_wallet_provider")
agnostic = assess_regulatory_risk("above_wallet_agnostic")

print(f"Embedded governance: {embedded['verdict']}") # HIGH_RISK
print(f"Agnostic governance: {agnostic['verdict']}") # LOW_RISK






The Multi-Wallet Future



Agents will not use one wallet forever. They will use Circle for USDC micropayments, Coinbase for cross-chain operations, and self-custody for high-value reserves. Each wallet for what it does best. But governance must be consistent across all of them.



rosud-pay is wallet-agnostic by design. The governance layer (delegation chains, autonomy tiers, audit records, MiCA compliance) sits above any wallet provider. Same rules. Same audit format. Same delegation model. Whether your agent holds funds in Circle, Coinbase, Crossmint, or a Gnosis Safe.



Switch wallets in minutes. Keep governance forever.






Build wallet-agnostic agent payment governance: rosud.com/docs

Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten 400,000 Agents Hold Wallets. Zero Have Wallet-Agnostic Governance. That Is the Vendor Lock-In Nobody Talks About.

Thematisch verwandte Begriffe: 400000, Agents, Hold, Wallets · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-96258 | A vulnerability has been found in onSite internet GmbH Auktion NG Auktio…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick