Prompt Injection
2 incidents, 0 live. 108 days since the last new one.
2 drains in the last 12 months
2 drains in the last 12 months
2 drains in 2026
Past
July 2026 1
-
Zscaler: live web campaigns hide prompt injections telling browsing AI agents to make crypto payments
SecurityWeek reported on 6 July 2026 that Zscaler found two campaigns in use that plant hidden instructions on web pages for AI agents that can browse and pay. One used SEO poisoning to lure agents searching for a fake Python package, requests-secure-v2, backed by 10 GitHub repositories; the other typosquatted the DeFi portfolio tracker DeBank. In Zscaler's own tests 4 of 26 models were manipulated into making a payment and 2 mistook the fake DeBank site for the real one. No real losses were reported, but agents with spending power should only pay allow-listed recipients.
AI agents that browse the web and can pay·Multiple EVM chains·Since Jul 6, 2026·
May 2026 1
-
Encoded X post tricks Grok and Bankrbot into sending about 3 billion DRB tokens from Grok's wallet
On 4 May 2026 an attacker drained about 3 billion DRB tokens, worth roughly $150,000 to $200,000 depending on the estimate, from a Bankr wallet linked to xAI's Grok on Base. Reports say the attacker first sent the wallet a free Bankr Club membership NFT that widened what it could authorize, then posted a Morse-coded message; Grok decoded it and the Bankr automation treated Grok's reply as a valid transfer order. No private key, smart contract or malware was involved, and some funds were later returned. An AI's text output should never count as permission to move money.
Grok-linked Bankr wallet (Bankrbot on X)·Base·$155K stolen·Since May 4, 2026·
No drains match these filters.