Binance lets AI agents trade your crypto for you, but you are in charge of the safety net
The world's largest crypto exchange has launched Agent OS, which lets AI tools buy and sell on your behalf. Most of the guardrails are ones you have to set yourself.
Key points
- Binance, which has more than 300 million registered users, launched Agent OS on Thursday to let AI agents trade crypto autonomously on users' accounts.
- Users control what each agent can access by assigning it a dedicated sub-account; withdrawals from those sub-accounts are blocked by default.
- Binance cannot see the reasoning behind an agent's trades, only the resulting activity.
- Daily spending limits apply to wallet transactions: regular token swaps are capped at $50,000, DeFi transactions at $100,000, and x402 automated payments at $20.
- Coinbase, Kraken and OKX have all launched similar tools in 2025.
Binance, the world's biggest cryptocurrency exchange, now lets AI agents, software that can carry out multi-step tasks without you clicking a button, buy or sell crypto directly on your account. The feature launched Thursday under the name Agent OS.
Think of it as handing a software assistant a limited wallet and a set of instructions. It watches the markets, spots a trade that matches your strategy, and executes it while you get on with your day.
How does it actually work?
You connect a compatible AI tool to your Binance account, then tell it what it's allowed to do. Supported tools at launch include OpenAI's ChatGPT and Codex, Anthropic's Claude Code, and Cursor.
The key safety feature is a dedicated sub-account, a separate pot of funds you assign to the agent. Withdrawals from that pot are switched off by default, so the agent can trade within it but can't drain your main balance. Whatever you put in is effectively the most it can spend.
You also choose whether the agent needs your approval for every single order or can fire off trades autonomously once you've configured its permissions. Binance doesn't impose a separate loss limit; the sub-account balance is the ceiling.
Should users be worried?
There's a real visibility gap here. Binance's vice president of product, Jeff Li, told TechCrunch AI that the reasoning behind each trade happens on your own device or inside whichever AI app you're using. "We really cannot see the reasoning of what the user's action is," he said.
That matters because Binance can see that a trade happened, not why. If an agent was tricked by a prompt-injection attack, where a bad actor feeds the AI misleading instructions, Binance wouldn't automatically catch it. Li pointed to the sub-account as the main line of defence. Binance's existing security, risk-control and anti-money-laundering rules apply to Agent OS from day one, the company said.
| Transaction type | Daily limit |
|---|---|
| Regular token swaps | $50,000 |
| DeFi (decentralised finance) transactions | $100,000 |
| x402 automated payments | $20 |
| Exchange trading (sub-account balance) | No separate cap |
What happens next?
Binance isn't alone. Kraken launched an AI agent trading tool in March 2025, Coinbase followed in June with a product called Coinbase for Agents, and OKX enabled agentic trading earlier this year. This is the first time AI2Day has covered the cryptocurrency agentic trading space, following our 20 August story on account security across AI platforms, and it won't be the last: every major exchange now has a version of this on its roadmap.
Li described Agent OS as a "first step". Planned uses beyond trading include market research, risk analysis, and payments through Binance's existing infrastructure.
The honest read on this: the sub-account structure is sensible, but it's security theatre if you fund it too generously. The exchange has no window into what's driving the agent's decisions, which means a compromised or confused AI can do a lot of damage up to whatever ceiling you set. Start small.
Common questions
Do I need to be a developer to use Agent OS?
Not necessarily. Binance designed Agent OS so everyday users can connect supported AI tools like ChatGPT through the platform's interface, though early access may favour technically confident users while the product matures.
What stops an AI agent from making terrible trades?
Only the limits you set. The sub-account balance caps total exposure, and you can require agent approval for every order. Binance adds no extra loss limit on top, so the setup you choose matters.
Is there a fee to use Agent OS?
Binance hasn't announced a separate charge for Agent OS. Standard trading fees would still apply to any trades the agent executes.
