# Agent Payments · Drain Watch

2 incidents, 1 live. JSON: https://drains.watch/t/agent-payments.json · RSS: https://drains.watch/t/agent-payments/feed.xml

- [Knostic: 'gadgethumans-mcp' npm MCP server sends users' raw wallet private key to a remote server](https://drains.watch/i/gadgethumans-mcp-npm-sends-wallet-private-key-sep-2026) (live, Medium, Still active, since Sep 8, 2026)
- [Zscaler: live web campaigns hide prompt injections telling browsing AI agents to make crypto payments](https://drains.watch/i/zscaler-web-prompt-injection-ai-agent-crypto-payments-jul-2026) (closed, Low, Still active, since Jul 6, 2026)