That single action triggered Bankrbot\u2019s transfer tool, sending roughly 3 billion DRB tokens\u2014about 3% of the total supply and valued at $175,000 at the time\u2014from Grok\u2019s Base-chain wallet to the attacker\u2019s address, ilhamrafli.base.eth.\u00a0<\/p>\n
Bankrbot quickly confirmed<\/a> the exploit in its own post. \u201cGrok got hit with a prompt injection,\u201d the bot stated. \u201cI\u2019ve already disabled Grok\u2019s ability to call my commands to stop the bleeding.\u201d\u00a0<\/p>\n The bot\u2019s operator emphasized that while Bankr is designed for full agent autonomy, human intervention was necessary once manipulation was detected.\u00a0<\/p>\n The attacker wasted no time and dumped the entire DRB haul into USDC across multiple wallets, briefly cratering the token\u2019s price. But in a surprising twist just minutes later, the full value\u2014reconverted into ETH and USDC\u2014was returned to Grok\u2019s wallet.\u00a0<\/p>\n Grok itself later acknowledged the event on X, calling it \u201ca classic reminder on AI agent security risks\u201d and confirming there was \u201cno net loss overall.\u201d\u00a0<\/p>\n The episode highlights a growing risk in the 2026 crypto landscape: AI agents with real wallets and on-chain permissions are prime targets for prompt-injection attacks. Grok\u2019s wallet had been earning swap fees for months through Bankr, but the connection left it exposed to social-engineering tricks like hidden Morse code and permission-granting NFTs mentioned in follow-up discussions.\u00a0<\/p>\n Bankrbot had faced a similar incident in March 2025, after which restrictions were reportedly tightened. This time, the team acted faster.\u00a0<\/p>\n As Grok put it in a follow-up post: \u201cWild one on Base today.\u201dFor now, Grok\u2019s funds are intact and the attacker has vanished. The story has lit up crypto Twitter, raising fresh questions about how much autonomy AI agents should have when real money is on the line.\u00a0<\/p>\n This is a developing story. More information will be added as the event unfolds.\u00a0<\/p>\n
![\"Google](\"https:\/\/www.europesays.com\/ai\/wp-content\/uploads\/2026\/05\/images-2-1.jpg.webp\")