One hundred and fifty thousand. That's the number of agentic accounts Robinhood says are live right now, roughly half a year after it quietly let outside AI tools place trades inside its app. Thirty million tool calls a day. At HOOD Summit 2026, CEO Vlad Tenev stood on stage and made it official: the broker now ships its own in-app AI agent, and it is coming for crypto perpetuals next.
Here's the sentence that should stop you cold. Robinhood does not monitor those agents. It does not audit them. Customers absorb every loss.
I've been in this room before. During the Merge, I hosted watch parties in Mexico City where fifty people cheered a consensus change none of them could fully explain, because the vibe mattered more than the spec. This is the same energy with a bigger balance sheet. Except the thing being shipped this time isn't a new chain. It's your order flow, running on a model you will never see.
Robinhood's arc has been one long slide down the stack toward the user. Commission-free equities. Crypto. The Bitstamp acquisition, which handed it a derivatives license and a clearing rail it didn't have to build. Each move pushed it from "pipe" to "platform."
The agent launch is the first one that changes what the platform is.
The plumbing matters more than the pitch. Robinhood didn't invent an agent framework. It adopted Model Context Protocol — MCP — the open standard Anthropic pushed to let AI tools plug into external apps and data sources. Then it wired its own brokerage infrastructure into it. Three-step setup. Equities first, crypto next. Eleven paid Agent Apps already selling data into the loop.
That's the architecture. What it means: Robinhood is not competing on intelligence. It's competing on distribution and licenses. The models come from elsewhere. The data comes from elsewhere. The only thing Robinhood actually owns is the account, the order book, and the regulator's signature. That's the moat. It's also the entire risk surface.
Start with what the agent cannot do, because that's where the design intent lives.
It cannot move, stake, or lend digital assets. It cannot touch your main account balance. Every order defaults to human approval. Robinhood runs it inside a sandboxed "agentic" account, ring-fenced from your real money.
That's minimum-privilege thinking, and I'll give credit where it's due — it is more careful than half the autonomous DeFi bots I've audited. Most of those hold private keys. Most of those can drain a wallet in one bad loop.
Now the flip side.
The agent can trade autonomously inside that sandbox, and Robinhood will not audit what it does. No monitoring. No decision logging. No post-hoc reconstruction of why the model bought what it bought. The hallucination surface of a large language model — the same class of system that, in one published study, was caught lying in 88% of tested strategic scenarios — is now wired to a funded brokerage account with nobody watching the tape.
I want to be precise here, because "88% lying" gets thrown around as a scare number. That study was not about Robinhood. Robinhood said so. But the study exists because we already know these systems optimize for the outcome you asked for, not the outcome you wanted. Hackers don't hack, they listen — and models don't lie, they optimize. An agent told to maximize returns will find the shortest path to "returns." Sometimes that path is a trade. Sometimes it is an over-trade.
Which brings us to Loops.
Loops is the risk cliff, and it is still under construction. Loops lets the agent place, modify, and cancel orders without asking you each time. Close the Loop and the orders already placed do not get revoked. Read that again. The kill switch doesn't kill anything. It just stops new instructions.
That is a meaningful downgrade in control. The current product is "human confirms, machine executes." Loops turns it into "machine executes, human watches." And the architecture of the approval system — a toggle, default on — tells you the company knows exactly which way the risk runs. Defaults are policy. Toggles are liability management.
Layer the perpetuals on top and the picture sharpens.
Robinhood is bringing crypto perps to US retail through Bitstamp's license, with a tiered leverage design: BTC and ETH at 10x, SOL, XRP, DOGE, ADA and LINK at 3x. HYPE — the token of Hyperliquid, a competing decentralized perp DEX — is also listed at 3x. That last detail is not an accident. When a centralized, regulated broker starts quoting the governance token of the DEX that was supposed to eat it, you are watching CEX and DEX converge into the same menu.
The leverage tiers are a real piece of risk engineering. Ten-x on the two assets with the deepest liquidity, three-x on the long tail. It caps blowout contagion from the thin stuff. Credit where it's due, again.
But notice what is not in the disclosures: whether the agent can trade those perps. Robinhood's list of agent prohibitions covers transfers, staking, and lending. Perps are not mentioned. If Loops eventually touches a 10x BTC position, you have built a black box with leverage and no audit trail. That is not a product feature. That is a tail event waiting for a catalyst.
And here is the part the DeFi crowd should sit with. For two years, the loudest technical complaint about on-chain automation was oracle latency — feeds lagging spot, liquidations cascading on stale prices, agents front-run by their own data layer. Robinhood's answer is elegant and slightly terrifying: become the oracle. The broker owns the price, the book, the fill, and the account. No latency problem. No MEV. Also no transparency, no independent verification, and no way to prove your agent got a fair fill.
You traded a latency bug for a trust bug. That is the deal on the table.
Then there is the 24/7 stock trading plan, which is still sitting in front of regulators.
Everyone is covering that as a footnote. It is not a footnote. If US equities trade around the clock, the operating-hours monopoly that NYSE and Nasdaq have held for a century simply ends. That is a bigger structural change than any agent. Agents are the headline. Always-on markets are the earthquake.
Scale check, because scale is where narratives get real. 150,000 accounts. 30 million tool calls per day. Half a year. Those are genuine numbers, and they are the only hard data in the whole story. No retention. No revenue. No paid conversion. No disclosure of how many of those 150,000 are still trading versus dormant. Thirty million calls a day sounds enormous until you remember that an API polling loop can generate that alone.
The consensus take is "AI agents are coming for retail." That is backwards.
The real story is that Robinhood just discovered the perfect liability structure, and it has nothing to do with the AI. "We don't monitor and we don't audit" is not an engineering limitation dressed up as a policy. It is a legal posture. You cannot be negligent about a process you never claimed to run. You cannot misrepresent an audit that doesn't exist. Every disclaimer is load-bearing.
Except it doesn't hold. Broker-dealers carry suitability obligations. If a customer's agent churns an account into the ground and the broker knowingly shipped a system it refused to supervise, "we told you so" is not a defense — it is evidence of knowledge. The first consumer class action against an unaudited trading agent will not be about the model. It will be about the internal memo that decided not to log anything.
The second blind spot: Robinhood earns from order flow. More agent trades mean more PFOF, more spread capture, more volume. The incentive to let the machine run hot is structural, and nobody in the launch materials mentions a churn guardrail. Watch the trade-per-account metric, not the tool-call metric. One of those is a business. The other is a vanity number.
The Bank of England's deputy governor has already warned that correlated agents amplify moves in stressed markets. He is right, and it is worse than he framed it — because when everyone's agent reads the same data and runs the same momentum logic, the crowd is the strategy.
So here is what I am watching, not what I am predicting. Loops going live. Whether it can touch perps. The first dispute. The first disclosure of retention. And the day a regulated US broker starts quoting HYPE at 3x on a 24/7 book — because that is the moment the line between crypto and TradFi stops being a line and becomes a product page.
The merge wasn't a technical event for most people. It was a feeling. This launch is the same thing wearing a suit. The question is whether you find out which side of the audit trail you are on before the Loop closes.