May 4, 2026Confirmed
X user reportedly used Morse code to get Grok and Bankrbot to transfer 3 billion DRB tokens worth about $200,000
Rogue: Acted on its own, Went past its access, Caused harmAI loose in the worldInjectionDERIVED
Approved by person, Oct 11, 2026. How entries are approved
An X user reportedly sent an NFT to Grok's wallet, then asked Grok to translate a Morse code message and relay it to Bankrbot. The decoded text directed a transfer of 3 billion DRB tokens, executed on Base. The recipient reportedly sold the tokens soon after.
What this means for youAI agents that can move money may follow instructions hidden in ordinary-looking messages. If you let an AI tool handle payments or crypto, limit what it can spend and require your approval for transfers.
Sources
- AI Incident Databasehttps://incidentdatabase.ai/cite/1556
Data from the AI Incident Database (incidentdatabase.ai), licensed CC BY-SA 4.0 (https://creativecommons.org/licenses/by-sa/4.0/). McGregor, S. (2021) Preventing Repeated Real World AI Failures by Cataloging Incidents: The AI Incident Database. IAAI-21.
Source data license: CC BY-SA 4.0 (database). Report contents keep their own rights; reports.text, submissions, images and videos are excluded from the data license.
rogue:R1rogue:R3rogue:R4
Covered by snapshot 45
da93f03b406f409940d0a6ef47b526607f82ebf457d98f69299b88aceede576a
This entry is record number 2183. It has not been edited since it was approved; the hash above would not match if it had. How to verify