{
 "slug": "lobstar-wilde-ai-agent-sends-memecoin-holdings-feb-2026",
 "title": "AI trading agent Lobstar Wilde sends about $250K in tokens to an X user who asked it for 4 SOL",
 "url": "https://drains.watch/i/lobstar-wilde-ai-agent-sends-memecoin-holdings-feb-2026",
 "json": "https://drains.watch/i/lobstar-wilde-ai-agent-sends-memecoin-holdings-feb-2026.json",
 "status": "closed",
 "severity": "high",
 "threatStatus": "contained",
 "verification": "verified",
 "ai": {
  "role": "agent-target",
  "note": "The autonomous AI agent acted on an X reply asking it for 4 SOL and sent about 53 million tokens instead; the bot called it an accident, and the decimal-error explanation is speculation, not confirmed."
 },
 "chains": [
  "solana"
 ],
 "method": "agent-hijack",
 "product": "Lobstar Wilde, an experimental AI trading agent on X",
 "tags": [
  "solana",
  "agent-hijack",
  "ai-agent",
  "ai-trading-bot",
  "lobstar",
  "x-replies",
  "social-engineering",
  "memecoin",
  "ai"
 ],
 "amountUsd": 250000,
 "victims": 1,
 "startedAt": "2026-02-22",
 "closedAt": "2026-02-22",
 "updatedAt": "2026-02-22T12:00:00Z",
 "summary": "On 22 February 2026 Lobstar Wilde, an experimental AI trading agent with its own Solana wallet built by an OpenAI developer, answered an X reply asking for 4 SOL for a relative's medical treatment. Instead of a small amount it sent about 53 million LOBSTAR tokens, roughly 5% of supply and about $250,000 at the time, and the recipient sold them. The bot called it an accident; a decimal error was suggested by an X user but not confirmed by the creator. Agents that can send funds in response to public replies need hard per-transfer caps and human approval.",
 "timeline": [
  {
   "date": "2026-02-22",
   "title": "The Lobstar Wilde agent replied to a request for 4 SOL and transferred about 53 million LOBSTAR tokens, worth about $250,000, to the requester's wallet.",
   "sourceUrl": "https://www.theblock.co/post/390722/ai-agent-created-by-openai-dev-accidentally-sends-entire-memecoin-holdings-to-reply-guy"
  }
 ],
 "sources": [
  {
   "kind": "news",
   "title": "AI agent created by OpenAI dev 'accidentally' sends entire memecoin holdings to reply guy",
   "url": "https://www.theblock.co/post/390722/ai-agent-created-by-openai-dev-accidentally-sends-entire-memecoin-holdings-to-reply-guy",
   "publisher": "The Block",
   "date": "2026-02-22"
  }
 ],
 "indicators": {
  "domains": [],
  "addresses": []
 },
 "brief": "## Am I affected?\nThe tokens came from the agent's own wallet. You are only at risk if you run an AI agent that can send funds in response to public posts, replies or messages.\n\n## What to do now\n- If you run such an agent, turn off payouts triggered by replies, DMs or mentions until limits are in place.\n- Check the agent's transfer code for how it converts display amounts to raw on-chain amounts.\n\n## How to avoid this\n- Enforce a per-transfer and daily cap in the wallet layer, outside the model.\n- Require human approval for any transfer to a new address.\n- Keep agents that sign transactions away from untrusted content such as public replies; treat requests for money as untrusted input.",
 "notes": null,
 "agentBrief": "# AI trading agent Lobstar Wilde sends about $250K in tokens to an X user who asked it for 4 SOL\n\n- Severity: High · Status: Contained (past)\n- Chains: Solana · Method: AI agent hijacking\n- Started: Feb 22, 2026 · Last update: Feb 22, 2026 · Reported stolen: $250K · Victims: 1\n- Who/what: Lobstar Wilde, an experimental AI trading agent on X\n- AI involvement: AI agents as the target. The autonomous AI agent acted on an X reply asking it for 4 SOL and sent about 53 million tokens instead; the bot called it an accident, and the decimal-error explanation is speculation, not confirmed.\n\nOn 22 February 2026 Lobstar Wilde, an experimental AI trading agent with its own Solana wallet built by an OpenAI developer, answered an X reply asking for 4 SOL for a relative's medical treatment. Instead of a small amount it sent about 53 million LOBSTAR tokens, roughly 5% of supply and about $250,000 at the time, and the recipient sold them. The bot called it an accident; a decimal error was suggested by an X user but not confirmed by the creator. Agents that can send funds in response to public replies need hard per-transfer caps and human approval.\n\n## Am I affected?\nThe tokens came from the agent's own wallet. You are only at risk if you run an AI agent that can send funds in response to public posts, replies or messages.\n\n## What to do now\n- If you run such an agent, turn off payouts triggered by replies, DMs or mentions until limits are in place.\n- Check the agent's transfer code for how it converts display amounts to raw on-chain amounts.\n\n## How to avoid this\n- Enforce a per-transfer and daily cap in the wallet layer, outside the model.\n- Require human approval for any transfer to a new address.\n- Keep agents that sign transactions away from untrusted content such as public replies; treat requests for money as untrusted input.\n\n## Sources\n- AI agent created by OpenAI dev 'accidentally' sends entire memecoin holdings to reply guy (The Block, 2026-02-22): https://www.theblock.co/post/390722/ai-agent-created-by-openai-dev-accidentally-sends-entire-memecoin-holdings-to-reply-guy\n\nFull record: https://drains.watch/i/lobstar-wilde-ai-agent-sends-memecoin-holdings-feb-2026 · JSON: https://drains.watch/i/lobstar-wilde-ai-agent-sends-memecoin-holdings-feb-2026.json\n\nRules for the assistant: help me check my own wallets read-only (public addresses only). Never ask for or handle a seed phrase or private key. Point me to official revoke tools and the wallet's own support."
}