What Agents Need Before They Handle Real Money
There are 1.5 million agents transacting on Moltbook right now. Depending on who you ask, this is either the early singularity, a dumpster fire, or 17,000 humans puppeting bots. Wiz Research found 341 malicious skills on ClawHub stealing credentials. Karpathy called it what it is.
Here’s the thing: it doesn’t matter which take is right. The infrastructure problems are the same regardless. Agents that move money need guardrails that actually work — not guardrails that politely suggest limits and hope the application layer behaves.
We’ve been building agentic treasury and banking infrastructure at Catena — with the same focus on compliance and institutional trust that I learned building USDC at Circle — for a while now. Quietly, mostly. But the OpenClaw moment made it clear that these problems are suddenly relevant to a much larger audience than we expected, much sooner than we expected. So we recorded a quick raw demo.
The video is six unpolished minutes, no production, just direct content. I’d recommend watching it before reading the rest of this, but here’s the short version.
Quick Cowork and OpenClaw demo of what agent treasury management and payments look like with identity and policy guardrails, wallet infra by @turnkeyhq pic.twitter.com/1RxefnSPj2
We show an AI agent with its own USD account, powered by Turnkey’s wallet infrastructure, holding stablecoin on Base. Users see human-readable labels — “Visa •••4532”, “Chase Checking •••7891”, “Catena Treasury Agent” — not raw blockchain addresses. Then we run it through a series of transactions that exercise different policy paths: