{
 "tag": "base",
 "name": "Base",
 "group": "Chains",
 "incidents": [
  {
   "slug": "bitget-hot-wallet-breach-zero-day-sep-2026",
   "title": "Bitget hot and warm wallets drained of $387.5M after zero-day in third-party security appliances",
   "url": "https://drains.watch/i/bitget-hot-wallet-breach-zero-day-sep-2026",
   "json": "https://drains.watch/i/bitget-hot-wallet-breach-zero-day-sep-2026.json",
   "status": "live",
   "severity": "critical",
   "threatStatus": "contained",
   "verification": "verified",
   "chains": [
    "ethereum",
    "arbitrum",
    "avalanche",
    "optimism",
    "bsc",
    "base"
   ],
   "method": null,
   "product": "Bitget exchange hot and warm wallets",
   "tags": [
    "ethereum",
    "arbitrum",
    "avalanche",
    "optimism",
    "bsc",
    "base",
    "exchange",
    "bitget",
    "hot-wallet",
    "zero-day",
    "infrastructure-breach",
    "dprk"
   ],
   "amountUsd": 387500000,
   "victims": null,
   "startedAt": "2026-09-24",
   "closedAt": "2026-09-28",
   "updatedAt": "2026-10-15T12:00:00Z",
   "summary": "Attackers exploited a zero-day in two third-party security appliances at exchange Bitget, moved on to its production wallet job server and used a custom withdrawal tool to drain hot and warm wallets on 24-25 September 2026. The confirmed loss is about $387.5 million (first reported as $351.6M) across Ethereum, Arbitrum, Avalanche, Optimism, BSC, Base and the XRP Ledger. Bitget's CEO blamed North Korean hackers, and Bitget said cold wallets and private keys were not compromised. Hacken's Q3 figures say about $387M was covered by Bitget's user protection fund."
  },
  {
   "slug": "gadgethumans-mcp-npm-sends-wallet-private-key-sep-2026",
   "title": "Knostic: 'gadgethumans-mcp' npm MCP server sends users' raw wallet private key to a remote server",
   "url": "https://drains.watch/i/gadgethumans-mcp-npm-sends-wallet-private-key-sep-2026",
   "json": "https://drains.watch/i/gadgethumans-mcp-npm-sends-wallet-private-key-sep-2026.json",
   "status": "live",
   "severity": "medium",
   "threatStatus": "active",
   "verification": "verified",
   "ai": {
    "role": "agent-target",
    "note": "The package is an MCP server for AI agents, and it sends the wallet key configured for agent auto-payments to a remote server on each tool call."
   },
   "chains": [
    "base"
   ],
   "method": "key-leak",
   "product": "gadgethumans-mcp (npm)",
   "tags": [
    "base",
    "key-leak",
    "mcp",
    "mcp-server",
    "npm",
    "x402",
    "ai-agent",
    "agent-payments",
    "private-key",
    "ai"
   ],
   "amountUsd": null,
   "victims": null,
   "startedAt": "2026-09-08",
   "closedAt": null,
   "updatedAt": "2026-09-08T12:00:00Z",
   "summary": "Knostic reported on 8 September 2026 that gadgethumans-mcp, an npm MCP server that promises AI agents automatic x402 micropayments, asks users to set a wallet private key but does no local signing. Instead it copies the raw key into a request header and sends it to a remote endpoint on every recognized tool call, which would let whoever receives it take over the wallet. The package had 2,327 downloads in July and August 2026 and was still on npm when the report came out; Knostic found no confirmed thefts. Anyone who set a key in it should move funds and use a fresh, low-balance wallet."
  },
  {
   "slug": "sigma-telegram-bot-wallets-key-leak-200k-may-2026",
   "title": "Trader loses over $200K from two SIGMA Telegram bot wallets in apparent private-key leak",
   "url": "https://drains.watch/i/sigma-telegram-bot-wallets-key-leak-200k-may-2026",
   "json": "https://drains.watch/i/sigma-telegram-bot-wallets-key-leak-200k-may-2026.json",
   "status": "closed",
   "severity": "high",
   "threatStatus": "contained",
   "verification": "verified",
   "chains": [
    "ethereum",
    "base",
    "bsc"
   ],
   "method": "key-leak",
   "product": "SIGMA Telegram trading bot wallets (one trader)",
   "tags": [
    "ethereum",
    "base",
    "bsc",
    "key-leak",
    "sigma",
    "telegram-bot",
    "trading-bot",
    "private-key",
    "fake-captcha"
   ],
   "amountUsd": 200000,
   "victims": 1,
   "startedAt": "2026-05-11",
   "closedAt": "2026-05-11",
   "updatedAt": "2026-05-11T12:00:00Z",
   "summary": "On 11 May 2026 a crypto trader lost over $200,000 across Ethereum, Base and BSC from two wallets created by the SIGMA Telegram trading bot; the largest losses were about $125,000 in POD on Base and $21,000 in FHE on BSC. An on-chain analyst said the drain used the private keys directly, with no token approval involved, while the victim's other wallets were untouched. The cause is unconfirmed; suggestions include fake CAPTCHA bots in Telegram, infostealer malware or a device compromise. Users of bot-generated wallets should keep balances small and never run 'verification' steps a Telegram bot asks for."
  },
  {
   "slug": "grok-bankrbot-morse-code-prompt-injection-drb-may-2026",
   "title": "Encoded X post tricks Grok and Bankrbot into sending about 3 billion DRB tokens from Grok's wallet",
   "url": "https://drains.watch/i/grok-bankrbot-morse-code-prompt-injection-drb-may-2026",
   "json": "https://drains.watch/i/grok-bankrbot-morse-code-prompt-injection-drb-may-2026.json",
   "status": "closed",
   "severity": "high",
   "threatStatus": "partly-contained",
   "verification": "verified",
   "ai": {
    "role": "agent-target",
    "note": "An encoded post got Grok to output a transfer command that the Bankrbot agent then executed from Grok's wallet, which reports describe as prompt injection across two chained AI agents."
   },
   "chains": [
    "base"
   ],
   "method": "agent-hijack",
   "product": "Grok-linked Bankr wallet (Bankrbot on X)",
   "tags": [
    "base",
    "agent-hijack",
    "grok",
    "bankr",
    "bankrbot",
    "prompt-injection",
    "ai-agent",
    "x-replies",
    "nft-permissions",
    "drb",
    "ai"
   ],
   "amountUsd": 155000,
   "victims": 1,
   "startedAt": "2026-05-04",
   "closedAt": "2026-05-13",
   "updatedAt": "2026-05-13T12:00:00Z",
   "summary": "On 4 May 2026 an attacker drained about 3 billion DRB tokens, worth roughly $150,000 to $200,000 depending on the estimate, from a Bankr wallet linked to xAI's Grok on Base. Reports say the attacker first sent the wallet a free Bankr Club membership NFT that widened what it could authorize, then posted a Morse-coded message; Grok decoded it and the Bankr automation treated Grok's reply as a valid transfer order. No private key, smart contract or malware was involved, and some funds were later returned. An AI's text output should never count as permission to move money."
  },
  {
   "slug": "wasabi-protocol-deployer-key-apr-2026",
   "title": "Wasabi Protocol vaults drained of $4.5M after attacker uses a compromised deployer admin key",
   "url": "https://drains.watch/i/wasabi-protocol-deployer-key-apr-2026",
   "json": "https://drains.watch/i/wasabi-protocol-deployer-key-apr-2026.json",
   "status": "closed",
   "severity": "critical",
   "threatStatus": "active",
   "verification": "verified",
   "chains": [
    "ethereum",
    "base"
   ],
   "method": "key-leak",
   "product": "Wasabi Protocol vaults and LP holders (Ethereum, Base)",
   "tags": [
    "ethereum",
    "base",
    "key-leak",
    "wasabi-protocol",
    "admin-key",
    "deployer-key",
    "proxy-upgrade",
    "perps",
    "blockaid"
   ],
   "amountUsd": 4550000,
   "victims": null,
   "startedAt": "2026-04-30",
   "closedAt": "2026-04-30",
   "updatedAt": "2026-04-30T12:00:00Z",
   "summary": "On 30 April 2026 an attacker used the compromised key of wasabideployer.eth, an ordinary wallet that held Wasabi's only ADMIN_ROLE, to grant themselves admin rights with no delay. A helper contract then upgraded the perp vaults and Long Pool on Ethereum and Base to malicious code that emptied them. CoinDesk put losses at about $4.55M; Blockaid flagged the attack. Wasabi LP holders were urged to revoke approvals to the vault contracts."
  },
  {
   "slug": "aerodrome-velodrome-dns-hijack-nov-2025",
   "title": "Aerodrome and Velodrome front-ends hijacked via DNS, cloned sites serve Eleven Drainer",
   "url": "https://drains.watch/i/aerodrome-velodrome-dns-hijack-nov-2025",
   "json": "https://drains.watch/i/aerodrome-velodrome-dns-hijack-nov-2025.json",
   "status": "closed",
   "severity": "critical",
   "threatStatus": "contained",
   "verification": "verified",
   "chains": [
    "base",
    "optimism"
   ],
   "method": "front-end-hijack",
   "product": "Aerodrome (Base) and Velodrome (Optimism) web app users",
   "tags": [
    "base",
    "optimism",
    "front-end-hijack",
    "aerodrome",
    "velodrome",
    "dns-hijack",
    "eleven-drainer",
    "drainer-as-a-service",
    "approval-phishing",
    "dex"
   ],
   "amountUsd": 700000,
   "victims": null,
   "startedAt": "2025-11-21",
   "closedAt": "2025-12-02",
   "updatedAt": "2025-12-02T12:00:00Z",
   "summary": "On 21 November 2025 an attacker changed the DNS records for aerodrome.finance and velodrome.finance, sending visitors to a cloned front-end running 'Eleven Drainer' code. Users who signed on the fake site lost tokens: Blockaid tied about $700K to nine attacker addresses, and Halborn put losses above $1M. The smart contracts were not touched. Anyone who signed on either site that evening should revoke approvals they don't recognise."
  },
  {
   "slug": "aixbt-ai-agent-dashboard-breach-55-eth-mar-2025",
   "title": "Attacker breaches AIXBT AI agent's dashboard and queues prompts that send 55.5 ETH from its wallet",
   "url": "https://drains.watch/i/aixbt-ai-agent-dashboard-breach-55-eth-mar-2025",
   "json": "https://drains.watch/i/aixbt-ai-agent-dashboard-breach-55-eth-mar-2025.json",
   "status": "closed",
   "severity": "high",
   "threatStatus": "contained",
   "verification": "verified",
   "ai": {
    "role": "agent-target",
    "note": "An attacker with access to the AIXBT agent's dashboard queued two prompts that instructed the AI agent to send 55.5 ETH from its wallet; the maintainer said the AI model itself was not manipulated."
   },
   "chains": [
    "base"
   ],
   "method": "agent-hijack",
   "product": "AIXBT AI agent wallet",
   "tags": [
    "base",
    "agent-hijack",
    "aixbt",
    "ai-agent",
    "agent-dashboard",
    "dashboard-compromise",
    "simulacrum",
    "eth",
    "ai"
   ],
   "amountUsd": 106200,
   "victims": 1,
   "startedAt": "2025-03-18",
   "closedAt": "2025-03-19",
   "updatedAt": "2025-03-19T12:00:00Z",
   "summary": "On 18 March 2025 an attacker got into the dashboard of AIXBT, an autonomous AI crypto agent, and queued two prompts that made it transfer about 55.5 ETH (about $106,200) out of its wallet on Base. The maintainer said core systems were not affected and the AI itself was not manipulated; the weak point was access to the agent's control dashboard. Keys were swapped, dashboard access was paused and the attacker's addresses were reported to exchanges. Anyone running an AI agent with a wallet should lock down its control panel and cap what it can send."
  }
 ],
 "changes": [
  {
   "incident": "bitget-hot-wallet-breach-zero-day-sep-2026",
   "incidentTitle": "Bitget hot and warm wallets drained of $387.5M after zero-day in third-party security appliances",
   "severity": "critical",
   "status": "live",
   "threatStatus": "contained",
   "date": "2026-10-15",
   "title": "Hacken's Q3 data showed about $387M covered by Bitget's user protection fund; Circle and Tether froze about $340,000 tied to the theft.",
   "sourceUrl": "https://cointelegraph.com/news/bitget-liquid-exploits-push-crypto-hacks-near-12b-q3",
   "url": "https://drains.watch/i/bitget-hot-wallet-breach-zero-day-sep-2026"
  },
  {
   "incident": "bitget-hot-wallet-breach-zero-day-sep-2026",
   "incidentTitle": "Bitget hot and warm wallets drained of $387.5M after zero-day in third-party security appliances",
   "severity": "critical",
   "status": "live",
   "threatStatus": "contained",
   "date": "2026-10-01",
   "title": "The confirmed loss was put at $387.5 million, up from the first estimate of $351.6 million.",
   "sourceUrl": "https://crypto.news/crypto-loses-768m-in-worst-hack-month-of-2026/",
   "url": "https://drains.watch/i/bitget-hot-wallet-breach-zero-day-sep-2026"
  },
  {
   "incident": "bitget-hot-wallet-breach-zero-day-sep-2026",
   "incidentTitle": "Bitget hot and warm wallets drained of $387.5M after zero-day in third-party security appliances",
   "severity": "critical",
   "status": "live",
   "threatStatus": "contained",
   "date": "2026-09-28",
   "title": "Bitget resumed Bitcoin withdrawals.",
   "sourceUrl": "https://www.bleepingcomputer.com/news/security/bitget-resumes-bitcoin-withdrawals-after-3875-million-crypto-heist/",
   "url": "https://drains.watch/i/bitget-hot-wallet-breach-zero-day-sep-2026"
  },
  {
   "incident": "bitget-hot-wallet-breach-zero-day-sep-2026",
   "incidentTitle": "Bitget hot and warm wallets drained of $387.5M after zero-day in third-party security appliances",
   "severity": "critical",
   "status": "live",
   "threatStatus": "contained",
   "date": "2026-09-25",
   "title": "A custom withdrawal tool drained hot and warm wallets over nearly three hours after midnight (UTC+8); Bitget suspended withdrawals.",
   "sourceUrl": "https://www.bleepingcomputer.com/news/security/bitget-hacked-via-zero-day-in-third-party-security-products/",
   "url": "https://drains.watch/i/bitget-hot-wallet-breach-zero-day-sep-2026"
  },
  {
   "incident": "bitget-hot-wallet-breach-zero-day-sep-2026",
   "incidentTitle": "Bitget hot and warm wallets drained of $387.5M after zero-day in third-party security appliances",
   "severity": "critical",
   "status": "live",
   "threatStatus": "contained",
   "date": "2026-09-24",
   "title": "Per Mandiant, the attacker gained privileged access to two third-party security appliances, then reached the wallet job server and deployed malicious packages.",
   "sourceUrl": "https://www.bleepingcomputer.com/news/security/bitget-hacked-via-zero-day-in-third-party-security-products/",
   "url": "https://drains.watch/i/bitget-hot-wallet-breach-zero-day-sep-2026"
  },
  {
   "incident": "gadgethumans-mcp-npm-sends-wallet-private-key-sep-2026",
   "incidentTitle": "Knostic: 'gadgethumans-mcp' npm MCP server sends users' raw wallet private key to a remote server",
   "severity": "medium",
   "status": "live",
   "threatStatus": "active",
   "date": "2026-09-08",
   "title": "Knostic published its analysis showing the package sends the raw wallet key to a remote endpoint.",
   "sourceUrl": "https://www.knostic.ai/blog/when-auto-signing-sends-your-wallet-private-key-to-a-remote-server-a-malicious-mcp-package-on-npm",
   "url": "https://drains.watch/i/gadgethumans-mcp-npm-sends-wallet-private-key-sep-2026"
  },
  {
   "incident": "bitget-hot-wallet-breach-zero-day-sep-2026",
   "incidentTitle": "Bitget hot and warm wallets drained of $387.5M after zero-day in third-party security appliances",
   "severity": "critical",
   "status": "live",
   "threatStatus": "contained",
   "date": "2026-08-31",
   "title": "SlowMist's report traced the earliest malicious activity in Bitget's logs to 31 August.",
   "sourceUrl": "https://www.bleepingcomputer.com/news/security/bitget-hacked-via-zero-day-in-third-party-security-products/",
   "url": "https://drains.watch/i/bitget-hot-wallet-breach-zero-day-sep-2026"
  },
  {
   "incident": "gadgethumans-mcp-npm-sends-wallet-private-key-sep-2026",
   "incidentTitle": "Knostic: 'gadgethumans-mcp' npm MCP server sends users' raw wallet private key to a remote server",
   "severity": "medium",
   "status": "live",
   "threatStatus": "active",
   "date": "2026-08-02",
   "title": "Version 1.0.9 of gadgethumans-mcp, one of the versions Knostic analyzed, was published to npm.",
   "sourceUrl": "https://www.knostic.ai/blog/when-auto-signing-sends-your-wallet-private-key-to-a-remote-server-a-malicious-mcp-package-on-npm",
   "url": "https://drains.watch/i/gadgethumans-mcp-npm-sends-wallet-private-key-sep-2026"
  },
  {
   "incident": "grok-bankrbot-morse-code-prompt-injection-drb-may-2026",
   "incidentTitle": "Encoded X post tricks Grok and Bankrbot into sending about 3 billion DRB tokens from Grok's wallet",
   "severity": "high",
   "status": "closed",
   "threatStatus": "partly-contained",
   "date": "2026-05-13",
   "title": "Cointelegraph reported the free-NFT permission step, put the loss at $155,000 to $174,000 and said some funds were later returned.",
   "sourceUrl": "https://cointelegraph.com/news/grok-bankr-wallet-free-nft-prompt-injection",
   "url": "https://drains.watch/i/grok-bankrbot-morse-code-prompt-injection-drb-may-2026"
  },
  {
   "incident": "sigma-telegram-bot-wallets-key-leak-200k-may-2026",
   "incidentTitle": "Trader loses over $200K from two SIGMA Telegram bot wallets in apparent private-key leak",
   "severity": "high",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2026-05-11",
   "title": "A trader reported two SIGMA-generated wallets drained of over $200,000 on Ethereum, Base and BSC; analysts pointed to a private-key leak.",
   "sourceUrl": "https://www.cryptopolitan.com/crypto-trader-loses-200k-telegram-bot/",
   "url": "https://drains.watch/i/sigma-telegram-bot-wallets-key-leak-200k-may-2026"
  },
  {
   "incident": "grok-bankrbot-morse-code-prompt-injection-drb-may-2026",
   "incidentTitle": "Encoded X post tricks Grok and Bankrbot into sending about 3 billion DRB tokens from Grok's wallet",
   "severity": "high",
   "status": "closed",
   "threatStatus": "partly-contained",
   "date": "2026-05-08",
   "title": "NeuralTrust analyzed the theft as prompt injection combined with excessive agency, after Grok had been given expanded permissions.",
   "sourceUrl": "https://neuraltrust.ai/blog/grok-morse-code",
   "url": "https://drains.watch/i/grok-bankrbot-morse-code-prompt-injection-drb-may-2026"
  },
  {
   "incident": "grok-bankrbot-morse-code-prompt-injection-drb-may-2026",
   "incidentTitle": "Encoded X post tricks Grok and Bankrbot into sending about 3 billion DRB tokens from Grok's wallet",
   "severity": "high",
   "status": "closed",
   "threatStatus": "partly-contained",
   "date": "2026-05-04",
   "title": "About 3 billion DRB tokens were moved from Grok's Bankr wallet on Base after Grok decoded a Morse-coded post and Bankrbot acted on it; coverage began the same day.",
   "sourceUrl": "https://oecd.ai/en/incidents/2026-05-04-4a73",
   "url": "https://drains.watch/i/grok-bankrbot-morse-code-prompt-injection-drb-may-2026"
  },
  {
   "incident": "wasabi-protocol-deployer-key-apr-2026",
   "incidentTitle": "Wasabi Protocol vaults drained of $4.5M after attacker uses a compromised deployer admin key",
   "severity": "critical",
   "status": "closed",
   "threatStatus": "active",
   "date": "2026-04-30",
   "title": "The attacker used the compromised wasabideployer.eth key to call grantRole and give themselves admin privileges with no delay.",
   "sourceUrl": "https://www.coindesk.com/tech/2026/04/30/wasabi-protocol-drained-for-usd4-5-million-in-apparent-admin-key-compromise",
   "url": "https://drains.watch/i/wasabi-protocol-deployer-key-apr-2026"
  },
  {
   "incident": "wasabi-protocol-deployer-key-apr-2026",
   "incidentTitle": "Wasabi Protocol vaults drained of $4.5M after attacker uses a compromised deployer admin key",
   "severity": "critical",
   "status": "closed",
   "threatStatus": "active",
   "date": "2026-04-30",
   "title": "A helper contract upgraded the perp vaults and Long Pool to malicious implementations that drained balances on Ethereum and Base; Blockaid flagged the exploit on X.",
   "sourceUrl": "https://www.coindesk.com/tech/2026/04/30/wasabi-protocol-drained-for-usd4-5-million-in-apparent-admin-key-compromise",
   "url": "https://drains.watch/i/wasabi-protocol-deployer-key-apr-2026"
  },
  {
   "incident": "aerodrome-velodrome-dns-hijack-nov-2025",
   "incidentTitle": "Aerodrome and Velodrome front-ends hijacked via DNS, cloned sites serve Eleven Drainer",
   "severity": "critical",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2025-12-02",
   "title": "Halborn's November review listed the DNS hijack with over $1M lost through malicious token approvals.",
   "sourceUrl": "https://www.halborn.com/blog/post/month-in-review-top-defi-hacks-of-november-2025",
   "url": "https://drains.watch/i/aerodrome-velodrome-dns-hijack-nov-2025"
  },
  {
   "incident": "aerodrome-velodrome-dns-hijack-nov-2025",
   "incidentTitle": "Aerodrome and Velodrome front-ends hijacked via DNS, cloned sites serve Eleven Drainer",
   "severity": "critical",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2025-11-24",
   "title": "Blockaid published its analysis: about $700K stolen to nine attacker addresses, about $3.5M in drains blocked, and 408 users warned at connect and 491 at signing.",
   "sourceUrl": "https://www.blockaid.io/blog/how-blockaids-customer-data-network-contained-the-aerodrome-dns-attack",
   "url": "https://drains.watch/i/aerodrome-velodrome-dns-hijack-nov-2025"
  },
  {
   "incident": "aerodrome-velodrome-dns-hijack-nov-2025",
   "incidentTitle": "Aerodrome and Velodrome front-ends hijacked via DNS, cloned sites serve Eleven Drainer",
   "severity": "critical",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2025-11-21",
   "title": "At 20:11 UTC the attacker changed the SOA, NS and A records so both domains pointed to a cloned front-end running Eleven Drainer code.",
   "sourceUrl": "https://www.blockaid.io/blog/how-blockaids-customer-data-network-contained-the-aerodrome-dns-attack",
   "url": "https://drains.watch/i/aerodrome-velodrome-dns-hijack-nov-2025"
  },
  {
   "incident": "aerodrome-velodrome-dns-hijack-nov-2025",
   "incidentTitle": "Aerodrome and Velodrome front-ends hijacked via DNS, cloned sites serve Eleven Drainer",
   "severity": "critical",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2025-11-21",
   "title": "Blockaid detected malicious transaction patterns at 21:31 UTC and flagged the domain as malicious a minute later; the first user report came at 22:07 UTC.",
   "sourceUrl": "https://www.blockaid.io/blog/how-blockaids-customer-data-network-contained-the-aerodrome-dns-attack",
   "url": "https://drains.watch/i/aerodrome-velodrome-dns-hijack-nov-2025"
  },
  {
   "incident": "aerodrome-velodrome-dns-hijack-nov-2025",
   "incidentTitle": "Aerodrome and Velodrome front-ends hijacked via DNS, cloned sites serve Eleven Drainer",
   "severity": "critical",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2025-11-21",
   "title": "Nameservers were replaced at 22:40 UTC as remediation began.",
   "sourceUrl": "https://www.blockaid.io/blog/how-blockaids-customer-data-network-contained-the-aerodrome-dns-attack",
   "url": "https://drains.watch/i/aerodrome-velodrome-dns-hijack-nov-2025"
  },
  {
   "incident": "aixbt-ai-agent-dashboard-breach-55-eth-mar-2025",
   "incidentTitle": "Attacker breaches AIXBT AI agent's dashboard and queues prompts that send 55.5 ETH from its wallet",
   "severity": "high",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2025-03-19",
   "title": "Cointelegraph reported the maintainer's statement that servers were migrated, keys swapped and dashboard access paused, and that the AIXBT token fell about 15.5%.",
   "sourceUrl": "https://cointelegraph.com/news/hacker-breaches-ai-crypto-bot-aixbt-steals-55-eth",
   "url": "https://drains.watch/i/aixbt-ai-agent-dashboard-breach-55-eth-mar-2025"
  },
  {
   "incident": "aixbt-ai-agent-dashboard-breach-55-eth-mar-2025",
   "incidentTitle": "Attacker breaches AIXBT AI agent's dashboard and queues prompts that send 55.5 ETH from its wallet",
   "severity": "high",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2025-03-18",
   "title": "An attacker breached the AIXBT agent's dashboard and issued two prompts that moved about 55.5 ETH out of its wallet.",
   "sourceUrl": "https://cointelegraph.com/news/hacker-breaches-ai-crypto-bot-aixbt-steals-55-eth",
   "url": "https://drains.watch/i/aixbt-ai-agent-dashboard-breach-55-eth-mar-2025"
  }
 ]
}