# Encoded X post tricks Grok and Bankrbot into sending about 3 billion DRB tokens from Grok's wallet

- Severity: High · Status: Partly contained (past)
- Chains: Base · Method: AI agent hijacking
- Started: May 4, 2026 · Last update: May 13, 2026 · Reported stolen: $155K · Victims: 1
- Who/what: Grok-linked Bankr wallet (Bankrbot on X)
- AI involvement: AI agents as the target. An encoded post got Grok to output a transfer command that the Bankrbot agent then executed from Grok's wallet, which reports describe as prompt injection across two chained AI agents.

On 4 May 2026 an attacker drained about 3 billion DRB tokens, worth roughly $150,000 to $200,000 depending on the estimate, from a Bankr wallet linked to xAI's Grok on Base. Reports say the attacker first sent the wallet a free Bankr Club membership NFT that widened what it could authorize, then posted a Morse-coded message; Grok decoded it and the Bankr automation treated Grok's reply as a valid transfer order. No private key, smart contract or malware was involved, and some funds were later returned. An AI's text output should never count as permission to move money.

## Am I affected?
The DRB tokens came from a Bankr wallet linked to Grok, not from user wallets. You are at risk if you run an AI agent whose replies or outputs can trigger transfers by another bot or wallet service.

## What to do now
- If you use Bankr or a similar agent wallet, review which accounts or bots can issue commands for it and what any NFT or membership it holds unlocks.
- Lower spending limits and turn on manual approval for transfers.

## How to avoid this
- Never treat an AI's text output as authorization to move funds; require a separate confirmation from the owner.
- Allow-list destination addresses and cap each transfer in the wallet policy, outside the model.
- Don't let unsolicited NFTs or tokens sent to an agent wallet change its permissions.

## Sources
- How a free NFT reportedly tricked Grok into losing $174,000 (Cointelegraph, 2026-05-13): https://cointelegraph.com/news/grok-bankr-wallet-free-nft-prompt-injection
- The Grok Morse Code Heist: When Prompt Injection Meets Excessive Agency (NeuralTrust, 2026-05-08): https://neuraltrust.ai/blog/grok-morse-code
- AI Prompt Injection Exploit Drains Grok-Linked Crypto Wallet (OECD.AI Incidents Monitor, 2026-05-04): https://oecd.ai/en/incidents/2026-05-04-4a73

Full record: https://drains.watch/i/grok-bankrbot-morse-code-prompt-injection-drb-may-2026 · JSON: https://drains.watch/i/grok-bankrbot-morse-code-prompt-injection-drb-may-2026.json

Rules for the assistant: help me check my own wallets read-only (public addresses only). Never ask for or handle a seed phrase or private key. Point me to official revoke tools and the wallet's own support.