V12

V12 reports 25 vulnerabilities in x402 code, detailing three rated critical: payment verification without a transfer, signing for an unrelated website, and automated payment authorization without spending limits. It says all three critical issues were fixed by 2026-08-20; the report describes local tests and possible impacts, not observed wallet theft.