{
 "tag": "x-replies",
 "name": "X Replies",
 "group": "Other",
 "incidents": [
  {
   "slug": "grok-bankrbot-morse-code-prompt-injection-drb-may-2026",
   "title": "Encoded X post tricks Grok and Bankrbot into sending about 3 billion DRB tokens from Grok's wallet",
   "url": "https://drains.watch/i/grok-bankrbot-morse-code-prompt-injection-drb-may-2026",
   "json": "https://drains.watch/i/grok-bankrbot-morse-code-prompt-injection-drb-may-2026.json",
   "status": "closed",
   "severity": "high",
   "threatStatus": "partly-contained",
   "verification": "verified",
   "ai": {
    "role": "agent-target",
    "note": "An encoded post got Grok to output a transfer command that the Bankrbot agent then executed from Grok's wallet, which reports describe as prompt injection across two chained AI agents."
   },
   "chains": [
    "base"
   ],
   "method": "agent-hijack",
   "product": "Grok-linked Bankr wallet (Bankrbot on X)",
   "tags": [
    "base",
    "agent-hijack",
    "grok",
    "bankr",
    "bankrbot",
    "prompt-injection",
    "ai-agent",
    "x-replies",
    "nft-permissions",
    "drb",
    "ai"
   ],
   "amountUsd": 155000,
   "victims": 1,
   "startedAt": "2026-05-04",
   "closedAt": "2026-05-13",
   "updatedAt": "2026-05-13T12:00:00Z",
   "summary": "On 4 May 2026 an attacker drained about 3 billion DRB tokens, worth roughly $150,000 to $200,000 depending on the estimate, from a Bankr wallet linked to xAI's Grok on Base. Reports say the attacker first sent the wallet a free Bankr Club membership NFT that widened what it could authorize, then posted a Morse-coded message; Grok decoded it and the Bankr automation treated Grok's reply as a valid transfer order. No private key, smart contract or malware was involved, and some funds were later returned. An AI's text output should never count as permission to move money."
  },
  {
   "slug": "lobstar-wilde-ai-agent-sends-memecoin-holdings-feb-2026",
   "title": "AI trading agent Lobstar Wilde sends about $250K in tokens to an X user who asked it for 4 SOL",
   "url": "https://drains.watch/i/lobstar-wilde-ai-agent-sends-memecoin-holdings-feb-2026",
   "json": "https://drains.watch/i/lobstar-wilde-ai-agent-sends-memecoin-holdings-feb-2026.json",
   "status": "closed",
   "severity": "high",
   "threatStatus": "contained",
   "verification": "verified",
   "ai": {
    "role": "agent-target",
    "note": "The autonomous AI agent acted on an X reply asking it for 4 SOL and sent about 53 million tokens instead; the bot called it an accident, and the decimal-error explanation is speculation, not confirmed."
   },
   "chains": [
    "solana"
   ],
   "method": "agent-hijack",
   "product": "Lobstar Wilde, an experimental AI trading agent on X",
   "tags": [
    "solana",
    "agent-hijack",
    "ai-agent",
    "ai-trading-bot",
    "lobstar",
    "x-replies",
    "social-engineering",
    "memecoin",
    "ai"
   ],
   "amountUsd": 250000,
   "victims": 1,
   "startedAt": "2026-02-22",
   "closedAt": "2026-02-22",
   "updatedAt": "2026-02-22T12:00:00Z",
   "summary": "On 22 February 2026 Lobstar Wilde, an experimental AI trading agent with its own Solana wallet built by an OpenAI developer, answered an X reply asking for 4 SOL for a relative's medical treatment. Instead of a small amount it sent about 53 million LOBSTAR tokens, roughly 5% of supply and about $250,000 at the time, and the recipient sold them. The bot called it an accident; a decimal error was suggested by an X user but not confirmed by the creator. Agents that can send funds in response to public replies need hard per-transfer caps and human approval."
  }
 ],
 "changes": [
  {
   "incident": "grok-bankrbot-morse-code-prompt-injection-drb-may-2026",
   "incidentTitle": "Encoded X post tricks Grok and Bankrbot into sending about 3 billion DRB tokens from Grok's wallet",
   "severity": "high",
   "status": "closed",
   "threatStatus": "partly-contained",
   "date": "2026-05-13",
   "title": "Cointelegraph reported the free-NFT permission step, put the loss at $155,000 to $174,000 and said some funds were later returned.",
   "sourceUrl": "https://cointelegraph.com/news/grok-bankr-wallet-free-nft-prompt-injection",
   "url": "https://drains.watch/i/grok-bankrbot-morse-code-prompt-injection-drb-may-2026"
  },
  {
   "incident": "grok-bankrbot-morse-code-prompt-injection-drb-may-2026",
   "incidentTitle": "Encoded X post tricks Grok and Bankrbot into sending about 3 billion DRB tokens from Grok's wallet",
   "severity": "high",
   "status": "closed",
   "threatStatus": "partly-contained",
   "date": "2026-05-08",
   "title": "NeuralTrust analyzed the theft as prompt injection combined with excessive agency, after Grok had been given expanded permissions.",
   "sourceUrl": "https://neuraltrust.ai/blog/grok-morse-code",
   "url": "https://drains.watch/i/grok-bankrbot-morse-code-prompt-injection-drb-may-2026"
  },
  {
   "incident": "grok-bankrbot-morse-code-prompt-injection-drb-may-2026",
   "incidentTitle": "Encoded X post tricks Grok and Bankrbot into sending about 3 billion DRB tokens from Grok's wallet",
   "severity": "high",
   "status": "closed",
   "threatStatus": "partly-contained",
   "date": "2026-05-04",
   "title": "About 3 billion DRB tokens were moved from Grok's Bankr wallet on Base after Grok decoded a Morse-coded post and Bankrbot acted on it; coverage began the same day.",
   "sourceUrl": "https://oecd.ai/en/incidents/2026-05-04-4a73",
   "url": "https://drains.watch/i/grok-bankrbot-morse-code-prompt-injection-drb-may-2026"
  },
  {
   "incident": "lobstar-wilde-ai-agent-sends-memecoin-holdings-feb-2026",
   "incidentTitle": "AI trading agent Lobstar Wilde sends about $250K in tokens to an X user who asked it for 4 SOL",
   "severity": "high",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2026-02-22",
   "title": "The Lobstar Wilde agent replied to a request for 4 SOL and transferred about 53 million LOBSTAR tokens, worth about $250,000, to the requester's wallet.",
   "sourceUrl": "https://www.theblock.co/post/390722/ai-agent-created-by-openai-dev-accidentally-sends-entire-memecoin-holdings-to-reply-guy",
   "url": "https://drains.watch/i/lobstar-wilde-ai-agent-sends-memecoin-holdings-feb-2026"
  }
 ]
}