# AI agent hijacking · Drain Watch

4 incidents, 0 live. JSON: https://drains.watch/t/agent-hijack.json · RSS: https://drains.watch/t/agent-hijack/feed.xml

- [Zscaler: live web campaigns hide prompt injections telling browsing AI agents to make crypto payments](https://drains.watch/i/zscaler-web-prompt-injection-ai-agent-crypto-payments-jul-2026) (closed, Low, Still active, since Jul 6, 2026)
- [Encoded X post tricks Grok and Bankrbot into sending about 3 billion DRB tokens from Grok's wallet](https://drains.watch/i/grok-bankrbot-morse-code-prompt-injection-drb-may-2026) (closed, High, Partly contained, since May 4, 2026)
- [AI trading agent Lobstar Wilde sends about $250K in tokens to an X user who asked it for 4 SOL](https://drains.watch/i/lobstar-wilde-ai-agent-sends-memecoin-holdings-feb-2026) (closed, High, Contained, since Feb 22, 2026)
- [Attacker breaches AIXBT AI agent's dashboard and queues prompts that send 55.5 ETH from its wallet](https://drains.watch/i/aixbt-ai-agent-dashboard-breach-55-eth-mar-2025) (closed, High, Contained, since Mar 18, 2025)