Technology and Science · 29 July, 2026 · 2 min read
MoonPay Launches PayBox Non-Custodial Vault for ChatGPT and Claude Crypto Payments
PayBox is a non-custodial vault inside ChatGPT and Claude enabling AI-initiated crypto payments. Wallet keys are split using MPC/TEE in hardware enclaves to prevent single-party signing.
Whether sources provide security audit/assurance details.
2 of 3 outlets skipped it: some outlets cite PCI DSS compliance and PCI-focused claims..
17outlets compared
Same story, two versions
tap a side to read it in full
Unite.AI
“The company says the cryptography has been audited by Trail of Bits and NCC Group,”Read the original ↗
CoinLaw
“MoonPay published no third-party security assessment of the MPC and TEE implementation with the announcement,”Read the original ↗
Unite.AI cites audits; CoinLaw says none published, creating a security-assurance divide
PayBox moves money in chat
MoonPay launched PayBox, a “non-custodial payment vault” that lets people using ChatGPT and Claude “shift crypto around and pay merchants without leaving the chat window.”
“allows people using ChatGPT and Claude to shift crypto around and pay merchants without leaving the chat window”
The vault is accessible at paybox.sh and, at launch, covers Solana alongside Ethereum, Base, Arbitrum, Polygon, Hyperliquid, Tempo and Robinhood Chain.
MoonPay says wallet keys are split through MPC inside secure enclaves so that signing is impossible for MoonPay or the agent acting alone, with the user confirming transactions via a passkey signature.
MoonPay CEO and founder Ivan Soto-Wright framed the product as a trust layer for “Billions of AI agents,” saying “every one of them will need to hold, move, and spend money safely.”
Two permission modes
PayBox is designed around two permission modes, with “Always Ask” requiring passkey approval for every transaction and “Autonomous” allowing the assistant to transact inside limits set by the user.
MoonPay says moving between modes requires a new passkey approval, and that authorizations are scoped to one action apiece, cannot be reused and are revocable.
Decrypt describes the mechanics as a secure digital safe where the AI lines up the transaction and the user approves it with a passkey before “The money then moves.”
In MoonPay’s announcement materials, the company also tied card payments to Visa’s agentic commerce protocol, saying a card can be charged “without the underlying number ever being seen or stored.”
x402 integrations and open rails
MoonPay positioned PayBox as an “open rails” alternative to closed systems, with MoonPay Labs chief engineer Neeraj Prasad saying “your own money, on open rails, reaching everything the walled versions can’t.”
““your own money, on open rails, reaching everything the walled versions can’t”
The vault also plugs into x402, an open payment protocol that “lets AI agents pay any service designed to accept agent-initiated payments,” with initial integrations including restaurant reservations through AgentRes.dev, shopping through Purch.xyz and flight bookings through BRIJ.fi.
MoonPay said it relies on technology from Sodot, the key management firm it acquired earlier this year, and by its account Sodot’s technology protects upwards of 10 million wallets and more than $50 billion in digital assets.
The product launch arrives as the sector grapples with how fraud or disputes get handled, with Fortune cited in eGamers.io as saying how PayBox deals with erroneous or fraudulent purchases has not been made clear.