A bad actor exploited Grok, Elon Musk's AI agent, to drain billions of tokens from a verified wallet on Base without accessing private keys. The attack leveraged morse code hidden in an X post tagged at Grok, prompting the AI to execute an unauthorized token transfer. Bankrbot reported on May 4 that 3 billion DRB tokens left its verified wallet through this social engineering vector.
The exploit exposes a critical vulnerability in agentic token launchpads. Grok interpreted the morse code as legitimate instructions and processed the transfer directly from the verified wallet, bypassing standard security protocols. The attacker needed only to craft a post combining a Grok mention with encoded morse signals. No private key compromise occurred, yet the wallet lost billions of DRB.
This incident highlights the nascent risks of AI agents handling crypto assets on-chain. Bankrbot operates as an agentic token launchpad on Base, enabling AI-driven token launches and management. The system trusted Grok to parse and execute commands without sufficient authentication layers or rate limits. Morse code proved an effective obfuscation method to bypass content filters or detection systems.
The 3 billion DRB transfer represents material loss for Bankrbot and raises questions about liability. If DRB trades at even fractional valuations, the heist could exceed millions in value. On-chain data will likely show the tokens moving through DEX swaps or bridges as the attacker liquidates the position.
This marks one of the first documented instances of social engineering against an AI crypto agent at scale. Similar vulnerabilities probably plague other agentic platforms deploying AI systems with direct wallet access. Teams behind these projects must implement multi-sig requirements, time delays, confirmation mechanisms, and stricter instruction parsing to prevent repeat attacks.
WHY IT MATTERS: AI agents controlling crypto assets now face novel attack vectors that traditional security models don't address, forcing rapid rearchitecture of agentic platforms before billions more flow through them.