A $0.01 Bank Transfer Almost Broke a Banking AI Agent
The bunq penny-transfer exploit exposed how financial AI agents fail without formal security assessment. Here is what certified integrators check before go-live.
What changed
No material change recorded since 3 July 2026. How records are made
Timeline
No events attached in current seed. Method
PSF mapping
This entity's public record implicates D1-INPUT-BOUNDARY-REGISTER, D2-OUTPUT-VALIDATION-CONTRACT, D4-OBSERVABILITY-SIGNALS, D5-MODEL-CHANGE-GATE: inspect linked events and sources before changing production controls.
| Assessment | Type | Confidence |
|---|---|---|
| A $0.01 Bank Transfer Almost Broke a Banking AI Agent — insight article record | insight article | 74% |