Virtuals Protocol addresses evolving prompt injection threats to agent wallets

When your AI agent has its own wallet, the question isn’t whether someone will try to trick it into sending funds. It’s when. Virtuals Protocol is rolling out programmable agent wallets designed to make that scenario a lot less catastrophic, introducing owner-configurable policies that enforce rules at the wallet level rather than relying on the AI itself to behave. The programmable wallets operate on Base with an expansion into Solana, giving agents non-custodial multi-chain smart accounts. Virtuals has introduced presets like “DENY_ALL,” which requires manual approval for every transaction, and “ACP_ONLY,” which limits where funds can actually go. Policies are enforced server-side, meaning they operate as a protection layer completely independent of the AI agent’s logic. Even if an attacker successfully poisons an agent’s memory or injects malicious prompts, the wallet itself won’t execute transactions that violate the owner’s rules. The architecture also separates wallet identity from signing keys. Policy controls can be managed through a dashboard or command line interface, giving owners flexibility in how they configure and monitor their agents’ financial behavior. The problem...