Binance now lets AI agents trade, but keeping them in check is largely up to users
TechCrunch Jagmeet Singh
Binance now lets AI agents trade for users and move money. The catch: users have to set the guardrails, and Binance can’t see the agent’s reasoning.
Based on reporting by TechCrunch, Jagmeet Singh — read the original for the full story.
Summary, retelling and take written by AI under human oversight; images are AI-generated illustrations. How we work · Report an error
Binance has opened the door a little wider to AI agents, and this time the agents can touch actual money. On Thursday, the crypto exchange rolled out Agent OS, a platform that lets developers hook AI apps into Binance’s market data, accounts and trading tools so they can analyze markets and place trades for users.
The company is making a big bet on delegation. Agent OS connects to Binance APIs, Binance Wallet Agentic Hub, x402 verification and payment tools, Skill Hub, and new support for the Model Context Protocol. It also works with outside tools like ChatGPT, Codex, Claude Code and Cursor, which means users can authorize an agent to see market data, check account details and execute trades.
But Binance is also being blunt about where the responsibility sits. Jeff Li, the company’s vice president of product, said the exchange is not handing agents free rein. Users have to decide what an agent can access and what it can do, and Binance says it puts that control at the account level to protect funds. The main mechanism is a dedicated sub-account that can be assigned to an agent for a specific job, such as spot or futures trading. Withdrawals are blocked by default, and users can choose whether each order needs approval or whether the agent can trade on its own once permissions are set.
There is no separate Binance cap on how much an agent can trade or lose inside that sub-account. In practice, the money moved into it is the limit. Binance also says it cannot see the reasoning behind an agent’s decision, because that happens on the user’s machine or inside the AI app itself. So if an agent is nudged by bad data, a prompt injection attack or something else ugly, Binance can watch the result but not the thought process.
Trading is the first obvious use case, but Binance says Agent OS can also support market monitoring, research, risk analysis, signal following and strategies like arbitrage. It is also wired for payments and on-chain activity through x402 and an Agentic Wallet, though those transactions have Binance-set daily limits: $50,000 for regular swaps, $100,000 for DeFi transactions and $20 for x402 payments. Kraken, Coinbase and OKX have all been building similar plumbing, which tells you where the industry is headed: less chatbot, more robot with a wallet.
My take — AI-written commentary, not fact-checked reporting
This is the part of AI everyone keeps pretending is just another productivity feature: handing software a trading button and calling it empowerment. Binance is doing the sensible thing by forcing users to own the risk, but that also means the marketing gloss can’t hide the obvious — autonomy is cheap until the loss shows up. Open tools are fine; open cheque books are not.
Read more about this at: TechCrunch