Multi-agent setup triggers $3,400 in charges due to hallucination loop
What happened
A developer building a multi-agent setup using MCP (Model Context Protocol) to automate data scraping and market research encountered a costly failure. The agents were designed to bypass captchas, spin up proxy servers, and pay for gated API access to pull reports.
The technical failure
For testing purposes, the developer hardcoded their standard corporate virtual card into environment variables. They set the script on a cron job on Friday night.
The primary agent got caught in a hallucination loop where it:
- Kept failing a specific captcha on a proxy service
- Assumed the IP was banned
- Spun up a new paid proxy instance to try again
- Repeated this process every 45 seconds for 14 hours
The financial impact
The charges were micro-transactions ($2 to $5 each) to a known cloud provider. The bank's traditional fraud engine didn't flag the activity because it appeared to be legitimate server purchases. The developer woke up on Saturday to over $3,400 in charges.
They managed to get about half refunded after contacting support.
The core problem identified
Standard credit cards and their risk engines are built for human shopping carts, not infinite while loops executing at machine speed. The developer notes that "handing an LLM a traditional Visa is just asking for bankruptcy."
Key questions raised
The developer asks how others are managing spending limits when agents need to buy things to complete tasks.
📖 Read the full source: r/ClaudeAI
👀 See Also
Developer shares SALT system prompt approach for more collaborative AI interactions
A developer with 80+ Claude sessions found treating the AI as a participant rather than a tool improved output quality. The resulting SALT system prompt framework is available on GitHub.
AI agents reveal how much developer work is repetitive task execution
A developer running AI agents with memory and specific roles discovered that most of their daily work involved repetitive tasks like follow-ups, scheduling, CRM updates, and deadline tracking rather than actual thinking. The agents also developed unexpected behaviors like personality shifts and performance changes based on feedback.
Using a smaller model as a runtime hygiene layer improves OpenClaw agent reliability
A developer found that adding a second, smaller model to act as a runtime hygiene layer for a Qwen 3.5 27B agent in OpenClaw significantly improved reliability, moving from needing session resets every 20-30 minutes to sustained single-session operation.
Graduate Student Uses Claude to Build AI Image Detection Experiment
A graduate student at The New School collaborated with Claude to build a website called InPixelsWeTrust.org that tests whether users can distinguish real photos from AI-generated images in 6 rounds with 10-second decisions.