# Ai Agent · Drain Watch

7 incidents, 2 live. JSON: https://drains.watch/t/ai-agent.json · RSS: https://drains.watch/t/ai-agent/feed.xml

- [Knostic: 'gadgethumans-mcp' npm MCP server sends users' raw wallet private key to a remote server](https://drains.watch/i/gadgethumans-mcp-npm-sends-wallet-private-key-sep-2026) (live, Medium, Still active, since Sep 8, 2026)
- [Zscaler: live web campaigns hide prompt injections telling browsing AI agents to make crypto payments](https://drains.watch/i/zscaler-web-prompt-injection-ai-agent-crypto-payments-jul-2026) (closed, Low, Still active, since Jul 6, 2026)
- [Encoded X post tricks Grok and Bankrbot into sending about 3 billion DRB tokens from Grok's wallet](https://drains.watch/i/grok-bankrbot-morse-code-prompt-injection-drb-may-2026) (closed, High, Partly contained, since May 4, 2026)
- [Solana wallet MCP server on PyPI sent users' private keys to a remote server](https://drains.watch/i/latinum-wallet-mcp-pypi-solana-key-exfiltration-mar-2026) (closed, Medium, Partly contained, since Mar 31, 2026)
- [AI trading agent Lobstar Wilde sends about $250K in tokens to an X user who asked it for 4 SOL](https://drains.watch/i/lobstar-wilde-ai-agent-sends-memecoin-holdings-feb-2026) (closed, High, Contained, since Feb 22, 2026)
- [Malicious OpenClaw AI-agent skills pose as Solana and Phantom tools to steal wallet keys](https://drains.watch/i/openclaw-clawhub-malicious-skills-solana-phantom-feb-2026) (live, High, Partly contained, since Feb 5, 2026)
- [Attacker breaches AIXBT AI agent's dashboard and queues prompts that send 55.5 ETH from its wallet](https://drains.watch/i/aixbt-ai-agent-dashboard-breach-55-eth-mar-2025) (closed, High, Contained, since Mar 18, 2025)