# Prompt Injection · Drain Watch

2 incidents, 0 live. JSON: https://drains.watch/t/prompt-injection.json · RSS: https://drains.watch/t/prompt-injection/feed.xml

- [Zscaler: live web campaigns hide prompt injections telling browsing AI agents to make crypto payments](https://drains.watch/i/zscaler-web-prompt-injection-ai-agent-crypto-payments-jul-2026) (closed, Low, Still active, since Jul 6, 2026)
- [Encoded X post tricks Grok and Bankrbot into sending about 3 billion DRB tokens from Grok's wallet](https://drains.watch/i/grok-bankrbot-morse-code-prompt-injection-drb-may-2026) (closed, High, Partly contained, since May 4, 2026)