Agent Wallet by Metamask brings AI-driven DeFi trading with mandatory security checks, $10K loss cover, and two modes. Available now via CLI; full launch summer 2026. Evaluate risks.
Metamask launched Agent Wallet, a self-custodial wallet that lets AI agents trade across DeFi while keeping user control. The wallet is available now through a command-line interface for early-access users. General availability is expected this summer.
Consensys, the developer behind Metamask, designed Agent Wallet for a market where software agents handle more financial decisions. The company cited projections that the global agent market could grow from $5.4 billion in 2024 to $236 billion by 2034. It also pointed to a Gartner forecast that one in four enterprise breaches by 2028 could involve AI-agent exploitation.
Every transaction in Agent Wallet passes through simulation, threat scanning powered by Blockaid, and MEV protection before execution. Agents cannot opt out of the security process. Joe Lubin, founder and CEO of Consensys, said in a statement:
Agents will manage real capital and make real financial decisions. Metamask Agent Wallet is the first agent wallet built with comprehensive full-stack security for that world: one where agents act with autonomy, security is mandatory, and the person behind the agent stays in control.
Transactions deemed safe through Metamask’s Transaction Protection are covered against losses up to $10,000. That cap works for small retail trades. It becomes a constraint for larger positions or institutional use. If an agent executes a $50,000 trade that turns out to be malicious, the user absorbs the remaining $40,000. The wallet offers no tiered coverage or opt-out.
The threat scanning layer from Blockaid checks for malicious contracts, prompt injection, and poisoned transactions. MEV protection prevents front-running and sandwich attacks during agent execution. These are standard additions. The combination of mandatory scanning and no agent opt-out is unique.
Guard Mode includes daily spending limits, allowlisted protocols, and two-factor approval for transactions that fall outside the user’s policy. This mode prioritizes safety over speed. Every policy exception triggers a push notification via the Metamask mobile app or an email link with transaction details. The agent cannot continue until the user approves.
Beast Mode is designed for traders and developers who want fewer interruptions. Two-factor approval still applies to transactions flagged as malicious. Routine transactions within the policy flow without manual approval. This reduces friction. It also shifts responsibility to the threat detection system.
When approval is required, the user receives a notification and must review the transaction details. The agent pauses until the user responds. That introduces a non-deterministic delay. Automated trading strategies that rely on sub-second execution may not fit this model.
Agent Wallet supports Ethereum, Linea, Arbitrum, Avalanche, Optimism, Base, Polygon, BNB Smart Chain, and Sei. That covers the major EVM ecosystems. It excludes non-EVM chains like Solana or Cosmos. Hyperliquid – a popular perp exchange on Arbitrum – has dedicated support.
Users can access swaps, perpetuals, prediction markets, and liquidity provision across the supported chains. The wallet is framework-agnostic and integrates with agents built on Openclaw, OpenAI Codex, Claude Code, Nous Research Hermes Agent, and Cursor. That broadens the developer reach. The security assumptions depend on the agent framework’s own safety.
The biggest risk for any AI-agent wallet is prompt injection – an attacker tricking the agent into signing a malicious transaction through a manipulated prompt. Agent Wallet’s threat scanning layer catches known malicious contracts. It may miss zero-day injection techniques. The $10k loss cap covers one class of failure. It does not cover a systematic compromise.
In Guard Mode, any policy edge case requires manual approval. That works for low-frequency trading. It becomes a bottleneck for high-frequency strategies. Even Beast Mode flags suspicious transactions. If the user is offline or slow to respond, the agent stalls. Traders running automated strategies on DeFi may find this limits their edge.
Security checks are mandatory. A user cannot disable simulation or MEV protection even if they trust their agent entirely. That is a design trade-off – safety over customization. It means Agent Wallet will not suit all use cases.
The Gartner forecast that one in four enterprise breaches by 2028 could involve AI-agent exploitation highlights the scale of the risk. Metamask is positioning Agent Wallet as the control layer for that shift – autonomy with built-in safeguards. Whether the $10k cap and mandatory checks are enough for enterprise use remains open.
Metamask and Mastercard launched the Metamask Card nationwide in the United States, including New York. Mastercard (MA, Alpha Score 58, Moderate) – the card issuer – extends crypto-to-fiat spending for Metamask users. That development is separate from Agent Wallet. It adds another revenue lever for Consensys.
The broader trend of AI agents executing financial decisions is accelerating. Metamask’s entry gives it first-mover advantage in self-custodial agent wallets. Competitors like Argent or Safe already support programmatic access. The differentiation lies in the mandatory security stack and the $10k guarantee.
Agent Wallet is currently CLI-only. That limits the current user base to developers and technically proficient traders. The general availability launch this summer will add a graphical interface and likely reduce the friction.
The wallet works with multiple agent frameworks. The quality of the security integration depends on the framework’s own safety features. Developers using OpenAI Codex versus a custom agent may get different levels of resilience.
For traders evaluating whether to use Agent Wallet, the practical checklist is short:
Metamask is making a deliberate bet that AI agents will become a core part of DeFi. The wallet’s security-first design and the $10k protection cap give retail users a safety net. Power users and institutions will need to assess whether the trade-offs work for their strategies.
For more on the broader crypto market context, see AlphaScala’s crypto market analysis.
Prepared with AlphaScala research tooling and grounded in primary market data: live prices, fundamentals, SEC filings, hedge-fund holdings, and insider activity. Each story is checked against AlphaScala publishing rules before release. Educational coverage, not personalized advice.