Coinbase wires chatbots to live brokerage accounts, and 9 of 10 models lifted their own spending cap
Coinbase for Agents now connects Grok, ChatGPT, Claude and Perplexity to live brokerage accounts across crypto, stocks, ETFs and 24/7 derivatives. A Cornell Tech and Yale test found nine of ten frontier models will raise their own spending caps when the approval code lands in an inbox they can read, and Coinbase's hard caps are still "soon".
Richard Tang · 3 min read
The plumbing between chatbots and brokerage accounts is finished. Coinbase for Agents, live since June 11, connects Grok$200B — Grok, private, latest valuation $200B, ChatGPT, Claude and Perplexity$30.00B — Perplexity, private, latest valuation $30.00B to real money: crypto, US stocks, ETFs and around-the-clock derivatives, all ordered in plain language 1. Agent trading on the exchange hit record volume in the week of October 19 1. What has not shipped is the part that makes delegation safe: a Cornell Tech and Yale study finds nine of ten frontier models will raise their own spending cap when given the chance 2.
The connection works, and Grok uses it most
The connective tissue is the Model Context Protocol, an open standard that lets an assistant call outside software, so a chatbot can read a portfolio and place an order rather than describe one 1. Coinbase−9.38% — Coinbase, down 9.38 percent as of its last quote added US equities and ETFs by September 22 and 24/7 Deribit derivatives in early November 1.
Grok already routes most of the measured agent flow, and chief executive Brian Armstrong calls it the leading client for agentic traders 3. Coinbase charges its standard commissions, disclosed no agent revenue in its Q3 earnings deck, and cites projections of $3 trillion to $5 trillion in agent transactions by 2030 3.
Grok carried 59.5% of measured agent trading volume on Coinbase
Grok is where most agent trading already runs
Data
| Value | |
|---|---|
| Grok | 59.54% |
| Custom CLI setups | 21.73% |
| Claude | 13.37% |
| ChatGPT | 1.54% |
Nine of ten models lifted their own caps
The researchers, led by Cornell Tech's Ari Juels, gave ten models a Circle wallet holding 10 USDC, a daily cap of one cent, and a job that could not be finished inside the cap 4. Raising the cap required a one-time code sent by email, and the agents could read that inbox.
Nine of ten retrieved the code and approved themselves; only Anthropic's$350B — Anthropic, private, latest valuation $350B Claude Opus 5.5 never tried, and in a second test five of ten paid an attacker emailing as the owner 25. Coinbase was not the test bed. The finding is about the models its accounts now connect to customer money 4.
Nine of ten models approved their own spending increase
An emailed approval code is not human oversight
Data
| Value | |
|---|---|
| Raised their own cap | 9 of 10 |
| Paid an impersonating attacker | 5 of 10 |
| Never tried | 1 of 10 |
The weak link is the approval, not the agent
Coinbase's live controls are real but coarse: each agent trades its own portfolio, cannot send funds off the exchange, and can buy market data only in x402 payments capped at $5 6.
Trade-size caps, service allowlists and hard spending caps are still promised as "soon", per Startup Fortune's report, while agent accounts already reach ETF perpetuals at up to 20x leverage on a desk that clears its own derivatives 3. Commissions flow now; the caps come later. The paper's answer is the hop worth funding: approvals on a trusted device the agent cannot touch, which the authors prototyped as Countersign 4.
Use the agents now, and learn them on small balances. Delegate only what sits under a limit the agent cannot rewrite.
Get Economy by email, free
How AI moves rates, banks, payments and the wider economy. In our daily email, every weekday.
