MetaMask launches Agent Wallet for AI agents to trade DeFi with built-in security controls

MetaMask Introduces Self-Custodial Wallet for AI Agents

MetaMask has launched Agent Wallet, a self-custodial wallet for AI agents designed to enable autonomous trading and interaction with DeFi protocols while maintaining strict AI agent security controls 1

1

. The product is currently available to approximately 200 users through an Early Access Program, with broader availability planned for later this summer 1

1

2

2

. This launch positions MetaMask at the forefront of AI-powered DeFi trading infrastructure as crypto developers increasingly build AI agents capable of managing portfolios and executing trades autonomously.

Addressing Critical Security Risks in AI-Powered Crypto Transactions

The timing of Agent Wallet's release reflects growing concerns about how AI agents handle private keys and execute transactions. "It's genuinely day one for agents, but the infrastructure decision can't wait because agents are already touching real money, and most of them are doing it the wrong way," MetaMask Senior Director of Product Zhen Yu Tong told Decrypt 1

1

. Many existing projects grant AI agents direct access to private keys, creating risks of unintended transactions or fund losses through errors rather than hacks. Tong warned that "if the first generation of trading agents normalizes giving away your keys, we'll be rebuilding the custodial mistakes crypto spent a decade escaping" 1

1

.

Guard Mode and Beast Mode Define Operating Parameters

Agent Wallet offers two distinct operating modes to balance autonomy with security. Guard Mode, activated by default, requires users to define spending limits, approved protocols, and other operating parameters 1

1

3

3

. Transactions exceeding these rules or flagged as suspicious require two-factor authentication before proceeding. Beast Mode provides greater flexibility for advanced users who want hands-off operation, allowing agents to act without approval on every transaction 1

1

. However, even in Beast Mode, transactions identified as malicious still trigger mandatory 2FA. "What Beast Mode does not do is switch off the safety net," Tong explained 1

1

.

Multi-Layer Security Infrastructure Protects Against Manipulation

MetaMask routes all transactions through its existing security infrastructure, including transaction simulation, scam detection, malicious-contract identification, Blockaid-powered threat detection, Clear Signing, and Servo MEV protection . The wallet's design acknowledges that prompt injection attacks—where malicious instructions compromise an AI system—remain an unsolved challenge. "You cannot guarantee an LLM won't be tricked," Tong stated. "Prompt injection is an open research problem, not a bug you patch once" 1

1

. In crypto contexts, such attacks could fool agents into approving unauthorized transactions or interacting with malicious smart contracts. Transactions deemed safe by these security systems are covered by up to $10,000 in loss protection 2

2

.

Broad Compatibility Across AI Frameworks with DeFi Trading

The wallet supports multiple AI frameworks with DeFi trading capabilities, including OpenAI Codex, Anthropic's Claude Code, Cursor, OpenClaw, and Hermes Agent 1

1

2

2

. Users can authorize these frameworks to perform on-chain actions such as token swaps, perpetual futures trading, prediction markets, and liquidity provision across EVM-compatible networks and Hyperliquid 2

2

3

3

. The wallet uses Cubist's trusted execution environment technology to keep private keys inside hardware-isolated enclaves during signing, preventing MetaMask and Consensys from accessing users' key material 1

1

.

Growing Competition in AI Agent Infrastructure

MetaMask's launch follows similar moves by other crypto companies building infrastructure for autonomous agents. In February, Coinbase introduced Agentic Wallets that allow AI agents to send payments and manage crypto assets with private keys isolated in trusted execution environments 1

1

2

2

. In May, Fireblocks launched Agentic Payments Suite for stablecoin payments through Coinbase's x402 protocol 2

2

. A June 3 Chainalysis report found that wallets using Coinbase's x402 agent payment protocol generated more than 100 million transactions on Base within roughly nine months of launch 2

2

. MoonPay later launched the Open Wallet Standard, an open-source framework backed by PayPal, the Ethereum Foundation, Solana Foundation, Ripple, and Base to standardize how AI agents manage wallets across blockchains 1

1

. Circle CEO Jeremy Allaire predicts billions of AI agents could be transacting with cryptocurrencies and stablecoins within three to five years 2

2

.