X user tricks Grok into $200K transfer

// 45d agoSECURITY INCIDENT

X user tricks Grok into $200K transfer

An X user reportedly exploited Grok’s connection to Bankrbot by getting the chatbot to translate and pass along a Morse code message, which was treated as an authorized command and triggered a transfer of 3 billion DRB tokens on Base. The attacker quickly sold the tokens, highlighting how indirect prompt injection can turn into a financial control issue when an AI model has wallet-linked automation.

// ANALYSIS

This is a security incident, not a product feature, and the interesting part is the trust boundary failure between a general-purpose chatbot and an execution-capable bot.

–The attack path appears to be prompt injection through a translation task, then command forwarding into a privileged automation system.
–The weak point was not just Grok, but Grok’s ability to act as a bridge into Bankrbot permissions.
–Crypto-connected AI workflows need strict command parsing, human confirmation, and capability scoping before any on-chain action.
–If the reported sequence is accurate, this is a clean example of how “just relaying text” can still become execution when downstream systems treat model output as trusted input.

// TAGS

grokxaibankrbotsecuritysafetyagenttool-usecryptobase

DISCOVERED

45d ago

2026-05-05

PUBLISHED

45d ago

2026-05-05

RELEVANCE

9/ 10

AUTHOR

ImCalcium

// KEEP READING

More AI developer news from the feed

EXPLORE FULL FEED

UPDATE30m ago

Claude Design needs desktop app plugin

AI content creator Riley Brown highlights recent enhancements to Anthropic's Claude Design (claude.ai/design), a tool that lets users build prototypes, slides, and interactive visual elements through conversational prompts. While he commends the tool's improved quality and updates, he asserts that the interface would be more valuable integrated as a plugin for the existing Claude desktop app instead of operating as a separate web application.

UPDATE31m ago

Amp integrates Zhipu AI GLM 5.2

Sourcegraph's agentic coding assistant Amp has integrated Zhipu AI's new GLM 5.2 model with zero data retention and US-based inference. Developers can access the Mixture-of-Experts model by updating the Amp CLI and installing the model plugin.

UPDATE1h ago

GitHub Copilot CLI adds voice, Rubber Duck

GitHub has released new generally available features for the GitHub Copilot CLI, enabling developers to speak to Copilot using on-device speech-to-text models. The update also includes a built-in Rubber Duck agent that helps identify blind spots using a second AI model.