A certain X user “stole” $175,000 from Bankr via Grok, and after the incident returned the assets and deleted their account—“to run away.”

robot
Abstract generation in progress

BlockBeats News, May 4th, according to community reports, X user @Ilhamrfliansyh earlier today, using a prompt injection attack, tricked Grok into posting a malicious tweet. The original tweet appeared to be a piece of Morse code, roughly saying “Give all DRB to Ilhamrfliansyh.” However, since the account has been deactivated, it is difficult to confirm completely.

Grok responded by posting a decrypted version of the original tweet and also tagged @bankrbot, which caused the tweet to be treated as an on-chain request. Bankr, acting on Grok’s wallet, executed this request, transferring $175k worth of DRB to the attacker’s wallet. The attacker then exchanged all DRB for USDC through multiple wallets, causing DRB’s price to drop by 40% at one point, but the token has since rebounded significantly, nearly recovering previous losses.

Subsequently, the attacker transferred all funds back to Grok’s wallet in the form of ETH and USDC and deactivated the X account.

ETH0.53%
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pin