$TONTelegram’s new Agentic Wallets standard allows AI bots to hold user-funded wallets $TONspending within strict limits as semi-autonomous financial actors in the chat.
$TON Tech – the infrastructure team behind The Open Network – introduced Agentic Wallets on April 28, 2026, describing them as “self-custodial wallets designed for autonomous AI agents on $TONwhich finally gives Telegram bots their own way to move money. According to $TON‘s documents and supporting announcements, each AI agent can set up its own on-chain wallet, funded directly by the user; the agent then manages that balance autonomously, while ownership remains anchored to the user’s main wallet and can be withdrawn at any time.
$TON‘s AI agents get real wallets, not just UX gloss
Crucially, this is not a surveillance layer or a centralized key escrow hack. $TON Tech emphasizes that “no intermediary holds money at any time” and that this already exists $TON wallets require “no upgrades” to join the scheme, which is implemented as a standard contract pattern rather than a new app silo. The design uses a split-control architecture: users retain the master keys; agents are given limited contract-level permissions to initiate transfers, swaps, and DeFi interactions within a predetermined budget, with the ability for users to withdraw funds or terminate the agent’s access at will.
From a product perspective, the most important step is for Telegram itself to become the user interface and distribution layer. Telegram’s bot infrastructure and bot-to-bot messaging already spans a reported 1 billion+ users; Agentic Wallets plug into that fabric so that a user can literally ask a bot in chat to “create a wallet,” fund it, and then let them pay for services, exchange tokens, or transact from the same interface. As Grekov puts it, “Agentic Wallets turn AI agents from assistants into actors – agents on Telegram can not only communicate, but also conduct transactions,” reducing the distance between conversation and settlement in a single app.
Programmable capital with a will – and a larger attack surface
The concrete use cases $TON The tech and third-party items are exactly the ones you’d expect: trading bots with predefined budgets, DeFi agents handling staking and wallet rotations, and automation for subscription payments, API usage, and microtransactions, all without routing through custodians. Blockster’s analysis is blunt: this “pushes Telegram-based AI agents beyond simple assistants and toward something closer to autonomous financial actors,” meaning that once budgets and rules are set, the agent can maintain balances, make payments, and interact with on-chain applications without a human clicking on each transaction to “confirm.”
For crypto, that’s the actual “AI + blockchain” crossover that matters: not volatile “AI tokens,” but agent frameworks that can hold positions, fund perpetrators, throw dollar-cost averaging into a basket, or run a Polymarket/Kalshi-style prediction market book 24/7 in a chat app. In practice, this means that your next trading strategy, recurring cash flow, or cross-border bill payments can be delegated to scripts with persistent identity and direct on-chain reach, turning capital into something closer to a semi-autonomous process than a pile of passive balances.
The downside is that the governance and security surface has just exploded. None of the launch materials address what happens when an “agent” subverts a protocol, directs retail flow, or becomes part of a cartel that coordinates MEV-like behavior within DeFi within Telegram. The attack vectors are obvious: prompt injection or jailbreaks that undermine an agent’s policy layer, Telegram account takeover that allows an attacker to reconfigure or drain agents’ wallets, or poorly written agent logic that automatically compensates for bad positions and wipes out user balances while formally staying “on budget.”
Legally and politically, the chain of liability is completely undefined: when an agent running Telegram uses an Agentic Wallet to launder money or exploit a DeFi contract, the blame can be projected onto the user, the bot developer, $TON Tech’s standard, or Telegram’s distribution layer, without a clear doctrine to divide responsibility. That ambiguity is exactly why this launch is bigger than another “AI wallet” gimmick: it’s the first serious attempt to normalize autonomous agents as on-chain actors within a mainstream consumer app, with all the benefits that entails and all the systemic risks that entails.