AIXBT autonomous agent drained of 55.5 ETH via two malicious prompts queued through its dashboard

An attacker compromised the secure dashboard of AIXBT, an autonomous crypto-market agent on Virtuals Protocol, at 02:00 UTC on March 18, 2025, and queued two fraudulent prompts into its autonomous response system. The agent executed them, transferring 55.5 ETH (roughly $107,000 at the time) from its Simulacrum wallet on Base to the attacker's address. The AIXBT token fell about 20% on the news.

What this means for youAt home: AI agents that hold money can be tricked into sending it to thieves. At work: any agent with wallet or payment access needs its control panel locked down and spending limits. In government: this adds to questions about who is liable when agents move funds. Check that any AI tool you use cannot spend money without your approval, and that its admin login uses strong two-factor protection.