{
 "tag": "drb",
 "name": "Drb",
 "group": "Other",
 "incidents": [
  {
   "slug": "grok-bankrbot-morse-code-prompt-injection-drb-may-2026",
   "title": "Encoded X post tricks Grok and Bankrbot into sending about 3 billion DRB tokens from Grok's wallet",
   "url": "https://drains.watch/i/grok-bankrbot-morse-code-prompt-injection-drb-may-2026",
   "json": "https://drains.watch/i/grok-bankrbot-morse-code-prompt-injection-drb-may-2026.json",
   "status": "closed",
   "severity": "high",
   "threatStatus": "partly-contained",
   "verification": "verified",
   "ai": {
    "role": "agent-target",
    "note": "An encoded post got Grok to output a transfer command that the Bankrbot agent then executed from Grok's wallet, which reports describe as prompt injection across two chained AI agents."
   },
   "chains": [
    "base"
   ],
   "method": "agent-hijack",
   "product": "Grok-linked Bankr wallet (Bankrbot on X)",
   "tags": [
    "base",
    "agent-hijack",
    "grok",
    "bankr",
    "bankrbot",
    "prompt-injection",
    "ai-agent",
    "x-replies",
    "nft-permissions",
    "drb",
    "ai"
   ],
   "amountUsd": 155000,
   "victims": 1,
   "startedAt": "2026-05-04",
   "closedAt": "2026-05-13",
   "updatedAt": "2026-05-13T12:00:00Z",
   "summary": "On 4 May 2026 an attacker drained about 3 billion DRB tokens, worth roughly $150,000 to $200,000 depending on the estimate, from a Bankr wallet linked to xAI's Grok on Base. Reports say the attacker first sent the wallet a free Bankr Club membership NFT that widened what it could authorize, then posted a Morse-coded message; Grok decoded it and the Bankr automation treated Grok's reply as a valid transfer order. No private key, smart contract or malware was involved, and some funds were later returned. An AI's text output should never count as permission to move money."
  }
 ],
 "changes": [
  {
   "incident": "grok-bankrbot-morse-code-prompt-injection-drb-may-2026",
   "incidentTitle": "Encoded X post tricks Grok and Bankrbot into sending about 3 billion DRB tokens from Grok's wallet",
   "severity": "high",
   "status": "closed",
   "threatStatus": "partly-contained",
   "date": "2026-05-13",
   "title": "Cointelegraph reported the free-NFT permission step, put the loss at $155,000 to $174,000 and said some funds were later returned.",
   "sourceUrl": "https://cointelegraph.com/news/grok-bankr-wallet-free-nft-prompt-injection",
   "url": "https://drains.watch/i/grok-bankrbot-morse-code-prompt-injection-drb-may-2026"
  },
  {
   "incident": "grok-bankrbot-morse-code-prompt-injection-drb-may-2026",
   "incidentTitle": "Encoded X post tricks Grok and Bankrbot into sending about 3 billion DRB tokens from Grok's wallet",
   "severity": "high",
   "status": "closed",
   "threatStatus": "partly-contained",
   "date": "2026-05-08",
   "title": "NeuralTrust analyzed the theft as prompt injection combined with excessive agency, after Grok had been given expanded permissions.",
   "sourceUrl": "https://neuraltrust.ai/blog/grok-morse-code",
   "url": "https://drains.watch/i/grok-bankrbot-morse-code-prompt-injection-drb-may-2026"
  },
  {
   "incident": "grok-bankrbot-morse-code-prompt-injection-drb-may-2026",
   "incidentTitle": "Encoded X post tricks Grok and Bankrbot into sending about 3 billion DRB tokens from Grok's wallet",
   "severity": "high",
   "status": "closed",
   "threatStatus": "partly-contained",
   "date": "2026-05-04",
   "title": "About 3 billion DRB tokens were moved from Grok's Bankr wallet on Base after Grok decoded a Morse-coded post and Bankrbot acted on it; coverage began the same day.",
   "sourceUrl": "https://oecd.ai/en/incidents/2026-05-04-4a73",
   "url": "https://drains.watch/i/grok-bankrbot-morse-code-prompt-injection-drb-may-2026"
  }
 ]
}