Prompt injection in agentic payment frameworks enables unauthorized wallet transfers, unlimited token approvals, and agent-level execution hijacking. A research-backed breakdown of the attack class, blast radius, and minimum defensive expectations.