Skip to content
~/drains.watch_
Soon
← Tags·Other

X Replies

2 incidents, 0 live. 171 days since the last new one.

2 drains in the last 12 months

2 drains in the last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct
MonWedFri
Critical 4 · High 3 · Med 2 · Low 1 · Update ½ Less More

Follow this tag

Past

May 2026 1

  • High◐Partly containedAI · Agent target

    Encoded X post tricks Grok and Bankrbot into sending about 3 billion DRB tokens from Grok's wallet

    On 4 May 2026 an attacker drained about 3 billion DRB tokens, worth roughly $150,000 to $200,000 depending on the estimate, from a Bankr wallet linked to xAI's Grok on Base. Reports say the attacker first sent the wallet a free Bankr Club membership NFT that widened what it could authorize, then posted a Morse-coded message; Grok decoded it and the Bankr automation treated Grok's reply as a valid transfer order. No private key, smart contract or malware was involved, and some funds were later returned. An AI's text output should never count as permission to move money.

    Grok-linked Bankr wallet (Bankrbot on X)·Base·$155K stolen·Since May 4, 2026·

February 2026 1

  • High✓ContainedAI · Agent target

    AI trading agent Lobstar Wilde sends about $250K in tokens to an X user who asked it for 4 SOL

    On 22 February 2026 Lobstar Wilde, an experimental AI trading agent with its own Solana wallet built by an OpenAI developer, answered an X reply asking for 4 SOL for a relative's medical treatment. Instead of a small amount it sent about 53 million LOBSTAR tokens, roughly 5% of supply and about $250,000 at the time, and the recipient sold them. The bot called it an accident; a decimal error was suggested by an X user but not confirmed by the creator. Agents that can send funds in response to public replies need hard per-transfer caps and human approval.

    Lobstar Wilde, an experimental AI trading agent on X·Solana·$250K stolen·Since Feb 22, 2026·

Brief for your AI


Get notified about new drains

Follow every new drain and update in your feed reader, Slack, Discord or Telegram RSS bot:

Only follow a chain or a method you care about: every tag has its own feed at /t/<tag>/feed.xml.

Copied