# AI-driven · Drain Watch

26 incidents, 5 live. JSON: https://drains.watch/t/ai.json · RSS: https://drains.watch/t/ai/feed.xml

- [Noir wallet drainer kit hides its backend behind DNS TXT records and DoH](https://drains.watch/i/noir-drainer-dns-txt-c2-oct-2026) (live, High, Still active, since Oct 9, 2026)
- [Joint advisory: North Korea's WaterPlum fake-job campaign infected 30,000 devices, hit 7,000+ wallets](https://drains.watch/i/waterplum-contagious-interview-advisory-sep-2026) (live, Critical, Still active, since Sep 18, 2026)
- [Knostic: 'gadgethumans-mcp' npm MCP server sends users' raw wallet private key to a remote server](https://drains.watch/i/gadgethumans-mcp-npm-sends-wallet-private-key-sep-2026) (live, Medium, Still active, since Sep 8, 2026)
- [Zscaler: live web campaigns hide prompt injections telling browsing AI agents to make crypto payments](https://drains.watch/i/zscaler-web-prompt-injection-ai-agent-crypto-payments-jul-2026) (closed, Low, Still active, since Jul 6, 2026)
- [TrapDoor packages on npm, PyPI and Crates.io steal wallet data and plant hidden prompts for AI coding tools](https://drains.watch/i/trapdoor-supply-chain-ai-assistant-config-poisoning-may-2026) (closed, High, Partly contained, since May 26, 2026)
- [Encoded X post tricks Grok and Bankrbot into sending about 3 billion DRB tokens from Grok's wallet](https://drains.watch/i/grok-bankrbot-morse-code-prompt-injection-drb-may-2026) (closed, High, Partly contained, since May 4, 2026)
- [Drift Protocol drained of $270M+ after signers pre-signed durable-nonce admin transactions](https://drains.watch/i/drift-protocol-durable-nonce-admin-takeover-apr-2026) (live, Critical, Contained, since Apr 1, 2026)
- [Solana wallet MCP server on PyPI sent users' private keys to a remote server](https://drains.watch/i/latinum-wallet-mcp-pypi-solana-key-exfiltration-mar-2026) (closed, Medium, Partly contained, since Mar 31, 2026)
- [Compromised LiteLLM releases on PyPI steal cloud keys and crypto wallet data from AI developers](https://drains.watch/i/litellm-pypi-teampcp-credential-wallet-stealer-mar-2026) (closed, Critical, Contained, since Mar 24, 2026)
- [Claude-assisted commit adds a North Korea-linked wallet-stealing npm package to an AI crypto trading agent](https://drains.watch/i/promptmink-ai-assisted-commit-malicious-npm-trading-agent-apr-2026) (closed, Medium, Still active, since Feb 28, 2026)
- [Arkanix stealer, likely built with LLM help, targeted crypto wallets before its makers shut it down](https://drains.watch/i/arkanix-stealer-llm-assisted-crypto-wallets-feb-2026) (closed, Low, Contained, since Feb 24, 2026)
- [AI trading agent Lobstar Wilde sends about $250K in tokens to an X user who asked it for 4 SOL](https://drains.watch/i/lobstar-wilde-ai-agent-sends-memecoin-holdings-feb-2026) (closed, High, Contained, since Feb 22, 2026)
- [North Korea's UNC1069 used an apparent deepfake CEO on a fake Zoom call to infect a crypto fintech](https://drains.watch/i/unc1069-deepfake-ceo-zoom-clickfix-crypto-fintech-feb-2026) (closed, Medium, Still active, since Feb 9, 2026)
- [Malicious OpenClaw AI-agent skills pose as Solana and Phantom tools to steal wallet keys](https://drains.watch/i/openclaw-clawhub-malicious-skills-solana-phantom-feb-2026) (live, High, Partly contained, since Feb 5, 2026)
- [North Korea-linked KONNI targets blockchain developers with an AI-generated PowerShell backdoor](https://drains.watch/i/konni-ai-generated-backdoor-blockchain-developers-jan-2026) (closed, Medium, Still active, since Jan 22, 2026)
- [Kaspersky: North Korea's BlueNoroff uses generative AI to speed up malware in GhostCall and GhostHire crypto attacks](https://drains.watch/i/bluenoroff-ghostcall-ghosthire-genai-malware-oct-2025) (closed, Medium, Still active, since Oct 28, 2025)
- [THORChain co-founder loses about $1.35M after a fake Zoom call showing a deepfake of a friend](https://drains.watch/i/thorchain-founder-deepfake-zoom-wallet-drain-sep-2025) (closed, Critical, Still active, since Sep 4, 2025)
- [Compromised Nx npm packages ran victims' AI command-line tools to hunt for wallet and keystore files](https://drains.watch/i/nx-s1ngularity-npm-malware-ai-cli-wallet-search-aug-2025) (closed, Critical, Contained, since Aug 26, 2025)
- [Malicious 'contractshark.solidity-lang' Cursor extension steals an Ethereum core developer's private key](https://drains.watch/i/cursor-contractshark-solidity-extension-dev-key-theft-aug-2025) (closed, Medium, Partly contained, since Aug 13, 2025)
- [YouTube 'MEV bot' tutorials, some AI-generated, tricked users into deploying drainer contracts; $900K+ taken](https://drains.watch/i/ai-video-mev-bot-tutorials-drainer-contracts-aug-2025) (closed, High, Still active, since Aug 5, 2025)
- [AI-written npm package @kodane/patch-manager drained Solana wallets after 1,500+ downloads](https://drains.watch/i/kodane-patch-manager-ai-generated-solana-drainer-npm-jul-2025) (closed, High, Contained, since Jul 28, 2025)
- [Fake Solidity extension for the Cursor AI code editor leads to about $500K crypto theft from a developer](https://drains.watch/i/cursor-fake-solidity-extension-500k-crypto-theft-jul-2025) (closed, High, Partly contained, since Jul 10, 2025)
- [Phishing campaign used the AI site builder Lovable to fake Aave and push wallet connections](https://drains.watch/i/lovable-ai-built-aave-phishing-sites-jun-2025) (closed, Medium, Partly contained, since Jun 17, 2025)
- [North Korea's BlueNoroff used deepfaked executives on a Zoom call to infect a crypto foundation employee's Mac](https://drains.watch/i/bluenoroff-deepfake-zoom-crypto-foundation-jun-2025) (closed, Medium, Still active, since Jun 11, 2025)
- [Deepfake Zoom calls of Polygon's co-founder push malware to startup founders from a hijacked Telegram account](https://drains.watch/i/polygon-cofounder-deepfake-zoom-calls-may-2025) (closed, Medium, Still active, since May 13, 2025)
- [Attacker breaches AIXBT AI agent's dashboard and queues prompts that send 55.5 ETH from its wallet](https://drains.watch/i/aixbt-ai-agent-dashboard-breach-55-eth-mar-2025) (closed, High, Contained, since Mar 18, 2025)