{"id":"https://openalex.org/W7154974166","doi":"https://doi.org/10.48550/arxiv.2604.15367","title":"SoK: Security of Autonomous LLM Agents in Agentic Commerce","display_name":"SoK: Security of Autonomous LLM Agents in Agentic Commerce","publication_year":2026,"publication_date":"2026-04-15","ids":{"openalex":"https://openalex.org/W7154974166","doi":"https://doi.org/10.48550/arxiv.2604.15367"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.15367","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.15367","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.15367","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5134059188","display_name":"Qian'ang Mao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mao, Qian'ang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134027430","display_name":"Jiaxin Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Jiaxin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134077446","display_name":"Ya Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Ya","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134025773","display_name":"Li Zhu","orcid":"https://orcid.org/0009-0002-5679-4818"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhu, Li","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134077370","display_name":"Cong Ma","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ma, Cong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5134042498","display_name":"Jiaqi Yan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yan, Jiaqi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.2425999939441681,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.2425999939441681,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12203","display_name":"Mobile Agent-Based Network Management","score":0.13459999859333038,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10456","display_name":"Multi-Agent Systems and Negotiation","score":0.13369999825954437,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.6851000189781189},{"id":"https://openalex.org/keywords/payment","display_name":"Payment","score":0.6747999787330627},{"id":"https://openalex.org/keywords/database-transaction","display_name":"Database transaction","score":0.4505999982357025},{"id":"https://openalex.org/keywords/e-commerce","display_name":"E-commerce","score":0.4438999891281128},{"id":"https://openalex.org/keywords/cryptographic-protocol","display_name":"Cryptographic protocol","score":0.38690000772476196},{"id":"https://openalex.org/keywords/payment-processor","display_name":"Payment processor","score":0.38499999046325684},{"id":"https://openalex.org/keywords/autonomous-agent","display_name":"Autonomous agent","score":0.36469998955726624},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.29030001163482666}],"concepts":[{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.6851000189781189},{"id":"https://openalex.org/C145097563","wikidata":"https://www.wikidata.org/wiki/Q1148747","display_name":"Payment","level":2,"score":0.6747999787330627},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6182000041007996},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5253999829292297},{"id":"https://openalex.org/C75949130","wikidata":"https://www.wikidata.org/wiki/Q848010","display_name":"Database transaction","level":2,"score":0.4505999982357025},{"id":"https://openalex.org/C78597825","wikidata":"https://www.wikidata.org/wiki/Q484847","display_name":"E-commerce","level":2,"score":0.4438999891281128},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.38690000772476196},{"id":"https://openalex.org/C190978112","wikidata":"https://www.wikidata.org/wiki/Q17074350","display_name":"Payment processor","level":3,"score":0.38499999046325684},{"id":"https://openalex.org/C13687954","wikidata":"https://www.wikidata.org/wiki/Q4826847","display_name":"Autonomous agent","level":2,"score":0.36469998955726624},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.29030001163482666},{"id":"https://openalex.org/C148176105","wikidata":"https://www.wikidata.org/wiki/Q206494","display_name":"Transport Layer Security","level":3,"score":0.2825999855995178},{"id":"https://openalex.org/C2775851571","wikidata":"https://www.wikidata.org/wiki/Q6045205","display_name":"Interaction protocol","level":3,"score":0.2782999873161316},{"id":"https://openalex.org/C111009948","wikidata":"https://www.wikidata.org/wiki/Q1067690","display_name":"Two-phase commit protocol","level":5,"score":0.2736999988555908},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.26750001311302185},{"id":"https://openalex.org/C41550386","wikidata":"https://www.wikidata.org/wiki/Q529909","display_name":"Multi-agent system","level":2,"score":0.2669999897480011},{"id":"https://openalex.org/C108170787","wikidata":"https://www.wikidata.org/wiki/Q3951828","display_name":"Agency (philosophy)","level":2,"score":0.2651999890804291},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.26190000772476196},{"id":"https://openalex.org/C133112747","wikidata":"https://www.wikidata.org/wiki/Q7251931","display_name":"Protocol analysis","level":2,"score":0.26030001044273376},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.25679999589920044}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.15367","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.15367","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.15367","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.15367","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Autonomous":[0],"large":[1],"language":[2],"model":[3],"(LLM)":[4],"agents":[5,103],"such":[6,36],"as":[7,37],"OpenClaw":[8],"are":[9],"pushing":[10],"agentic":[11,186],"commerce":[12,105,187],"from":[13,152],"human-supervised":[14],"assistance":[15],"toward":[16],"machine":[17],"actors":[18],"that":[19,82,184,193],"can":[20],"negotiate,":[21],"purchase":[22],"services,":[23],"manage":[24],"digital":[25],"assets,":[26],"and":[27,32,67,106,122,138,147,154,162,205,213],"execute":[28],"transactions":[29],"across":[30,197],"on-chain":[31],"off-chain":[33],"environments.":[34],"Protocols":[35],"the":[38,52,62],"Trustless":[39],"Agents":[40],"standard":[41,65],"(ERC-8004),":[42],"Agent":[43,48,58],"Payments":[44,49,69],"Protocol":[45,50,60,70],"(AP2),":[46],"OKX":[47],"(APP),":[51],"HTTP":[53],"402-based":[54],"payment":[55],"protocol":[56,134,200],"(x402),":[57],"Commerce":[59,64],"(ACP),":[61],"Agentic":[63],"(ERC-8183),":[66],"Machine":[68],"(MPP)":[71],"enable":[72],"this":[73],"transition,":[74],"but":[75],"they":[76],"also":[77],"create":[78],"an":[79],"attack":[80,145],"surface":[81],"existing":[83],"security":[84,98],"frameworks":[85],"do":[86],"not":[87],"capture":[88],"well.":[89],"This":[90],"Systematization":[91],"of":[92,131],"Knowledge":[93],"(SoK)":[94],"develops":[95],"a":[96,126,168,190,210,214],"unified":[97],"framework":[99],"for":[100,217],"autonomous":[101,219],"LLM":[102,198],"in":[104],"finance.":[107],"We":[108,165,207],"organize":[109],"threats":[110],"along":[111],"five":[112],"dimensions:":[113],"agent":[114],"integrity,":[115],"transaction":[116],"authorization,":[117],"inter-agent":[118],"trust,":[119],"market":[120,160,203],"manipulation,":[121],"regulatory":[123],"compliance.":[124],"From":[125],"systematically":[127],"curated":[128],"public":[129],"corpus":[130],"academic":[132],"papers,":[133],"documents,":[135],"industry":[136],"reports,":[137],"incident":[139],"evidence,":[140],"we":[141],"derive":[142],"12":[143],"cross-layer":[144,191],"vectors":[146],"show":[148],"how":[149],"failures":[150],"propagate":[151],"reasoning":[153],"tooling":[155],"layers":[156],"into":[157],"custody,":[158],"settlement,":[159],"harm,":[161],"compliance":[163],"exposure.":[164],"then":[166],"propose":[167],"layered":[169],"defense":[170],"architecture":[171],"addressing":[172],"authorization":[173],"gaps":[174],"left":[175],"by":[176],"current":[177],"agent-payment":[178],"protocols.":[179],"Overall,":[180],"our":[181],"analysis":[182],"shows":[183],"securing":[185],"is":[188],"inherently":[189],"problem":[192],"requires":[194],"coordinated":[195],"controls":[196],"safety,":[199],"design,":[201],"identity,":[202],"structure,":[204],"regulation.":[206],"conclude":[208],"with":[209],"research":[211],"roadmap":[212],"benchmark":[215],"agenda":[216],"secure":[218],"commerce.":[220]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-04-21T00:00:00"}