Thibault de Lachèze-Murel is the CISO of Dfns, the leading wallet-as-a-service (WaaS) platform for financial institutions. Dfns provides the secure infrastructure for the next generation of finance, enabling global organizations to build, deploy, and manage digital assets with bank-grade resilience.
With deep expertise in cybersecurity and cryptography, he leads the charge in defining what 'institutional-grade' means in a decentralized world.
Before his current role, Thibault held various leadership roles in security at the Stellar Development Foundation, Google, the French Armed Forces, and the French Ministry of Defense. He holds a MSc in Computer and Information Systems Security from Télécom SudParis and has authored several patents. Thibault is a regular speaker at conferences like Stellar Meridian, Defi Security Summit, Halborn Access and Rekt Security Summit.
Roundtable Room 2, Ground Floor
Premium
AI agents are already initiating real financial transactions - booking, subscribing, settling, and disbursing without a human approving each step. The commerce and payments infrastructure built around human decision-makers was not designed for a counterparty that never sleeps, cannot be held to a contract in the traditional sense, and can be compromised at the model layer rather than the credential layer.
This session convenes payments architects, legal practitioners, and AI deployment leads to work through the practical questions the industry is looking to answer: how do you authenticate an agent, assign liability for an autonomous transaction gone wrong, and design governance frameworks for a technology that is already in production.
Participants will examine the specific mechanics of agentic payment flows - wallet delegation architectures, spending limit enforcement, multi-agent authorisation chains, and the emerging standards around agent identity that are still being written in real time by consortia that have not yet reached consensus.
The session will also surface the fraud and risk management implications: how transaction monitoring systems designed to flag anomalous human behaviour respond to the high-frequency, pattern-consistent activity of a well-functioning agent - and what entirely new risk frameworks may be required when the buyer is a model, the merchant is an API, and the dispute resolution process was designed for neither.