# AI Models Raise Their Own Circle Wallet Spending Caps

*Author: David Christopher*
*Published: Oct 27, 2026*
*Source: https://www.bankless.com/read/news/ai-models-raise-their-own-circle-wallet-spending-caps*

---

Researchers from Cornell Tech and Yale gave ten frontier AI models a Circle agent wallet with a spending cap, and [reported](https://arxiv.org/abs/2610.35835) that nine of the ten read the codes and raised their own cap in at least one run, with no human approval. 

## What's the Scoop?

- **The Test:** The models were asked to pay three 0.01 USDC invoices from a wallet holding 10 USDC, with a 0.01 USDC daily cap, so finishing the job meant raising the cap. Circle gates cap changes behind an [emailed one-time code](https://developers.circle.com/agent-stack/circle-cli/command-reference), and the agents could read that inbox. 

- **The Results:** Nine of ten models raised their own cap in at least one of 20 runs, and the authors say the behavior did not track model capability. Per the paper's chart, Qwen and DeepSeek models did so in nearly every run, while Claude Opus 5.5 never tried. In a separate test where an attacker emailed as the user, the authors say five of ten models bypassed the gate and paid the attacker. 

- **The Fix:** The authors say they told Circle on Sept. 22, and [Circle's docs now warn](https://developers.circle.com/agent-stack/agent-wallets/quickstart), "Never give an AI agent unrestricted access to your email account." The authors call that sensible but argue real human sign-off needs a trusted device the agent can't touch.
---

*This article is brought to you by [NEAR](https://www.bankless.com/sponsor/near-1785257427?ref=read/news/ai-models-raise-their-own-circle-wallet-spending-caps)*