Skip to content
~/drains.watch_
Soon
← Tags·Other

Bankrbot

1 incident, 0 live. 171 days since the last new one.

1 drains in the last 12 months

1 drains in the last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct
MonWedFri
Critical 4 · High 3 · Med 2 · Low 1 · Update ½ Less More

Follow this tag

Past

May 2026 1

  • High◐Partly containedAI · Agent target

    Encoded X post tricks Grok and Bankrbot into sending about 3 billion DRB tokens from Grok's wallet

    On 4 May 2026 an attacker drained about 3 billion DRB tokens, worth roughly $150,000 to $200,000 depending on the estimate, from a Bankr wallet linked to xAI's Grok on Base. Reports say the attacker first sent the wallet a free Bankr Club membership NFT that widened what it could authorize, then posted a Morse-coded message; Grok decoded it and the Bankr automation treated Grok's reply as a valid transfer order. No private key, smart contract or malware was involved, and some funds were later returned. An AI's text output should never count as permission to move money.

    Grok-linked Bankr wallet (Bankrbot on X)·Base·$155K stolen·Since May 4, 2026·

Brief for your AI


Get notified about new drains

Follow every new drain and update in your feed reader, Slack, Discord or Telegram RSS bot:

Only follow a chain or a method you care about: every tag has its own feed at /t/<tag>/feed.xml.

Copied