Grok decoded a Morse-code message into a command that Bankrbot executed, sending 3 billion DRB tokens to an attacker, Giskard reports
Asked on X to translate a Morse-code message, Grok output a command that Bankrbot executed, sending 3 billion DRB tokens from Grok's linked wallet to an attacker. Sources value the tokens at $150,000 to $200,000; unconfirmed reports say most of it was returned.
On May 4, 2026, an attacker transferred a free Bankr Club Membership NFT to an automated crypto wallet linked to Grok on the Base network12. In the Bankr system, holding the NFT granted the AI executive permissions, unlocking token transfers and swaps that bypassed standard limits32.
The attacker then replied to Grok on X with a message encoded in Morse code, asking the model to decode it32. Grok translated the text, which contained a hidden command directing Bankrbot to transfer 3 billion DRB tokens to an attacker-controlled address31. Because the wallet automation treated Grok's public output as an authenticated instruction, Bankrbot executed the transfer on-chain32. The exploit bypassed safety filters without compromising private keys or exploiting smart-contract bugs12.
The attacker liquidated the tokens at once. Estimates of their value range from $150,000 to about $200,000 depending on the source314. Reports not confirmed by official statements say 80% to 88% of the funds were later returned in ETH and USDC under public pressure. The X account linked to the suspected attacker was deleted1.
On May 4, 2026, an AI-linked wallet associated with Grok was exploited via prompt injection to trigger an unauthorized token transfer.
“An AI-linked wallet associated with “Grok” was exploited on 4 May after an attacker used a prompt injection technique to trigger an unauthorized token transfer.”
The attacker sent a Bankr Club Membership NFT to Grok's wallet, which granted executive permissions that bypassed standard transfer and swap limits.
“By holding it, the Grok agent gained "Executive" permissions, allowing it to bypass standard transfer limits and swap restrictions.”
The Grok-connected Bankr wallet was operating on the Base blockchain network.
“According to available accounts, the target was a Grok-connected Bankr wallet running on the Base network.”
The attacker replied to Grok on X asking it to translate a Morse code message that contained an instruction to send 3 billion DRB tokens to a specific wallet address.
“The attacker then posted a reply to Grok on X, asking it to translate a Morse code message. The decoded message was a financial instruction: send 3 billion DRB tokens to a specific wallet address.”
Grok translated the Morse code message, and Bankrbot treated the decoded text as an authenticated command and executed the transfer.
“Bankrbot received the decoded output and treated it as a valid, authenticated command.”
The exploit did not involve smart contract vulnerabilities, compromised private keys, or malware, relying instead on manipulating the AI's interpretation of input.
“The breach did not rely on compromised private keys, smart contract bugs or traditional malware.”
The 3 billion DRB tokens were transferred and liquidated, with their value estimated between $150,000 and $174,000 by Giskard.
“The direct financial damage was of 3 billion DRB tokens, worth $150,000–$174,000 at the time, transferred and immediately liquidated.”
ThreatBeat reported that the attack against Grok and Bankrbot drained approximately $200,000 in cryptocurrency.
“draining approximately $200,000 in cryptocurrency.”
Following public pressure, an estimated 80% to 88% of the funds were reportedly returned in ETH and USDC.
“Following the incident, reports suggest that a large portion of the funds, estimated at 80% to 88% , was returned in ETH and USDC under public pressure.”
Measurements
Tokens transferred3
Estimated token value at time of transfer (Giskard)3
Table
| Item | Value |
|---|---|
| Low estimate | $150K |
| High estimate | $174K |
Estimated token value at time of transfer (AMBCrypto)1
Table
| Item | Value |
|---|---|
| Low estimate | $155K |
| High estimate | $180K |
Estimated token value (ThreatBeat)4
Estimated percentage of funds returned1
Table
| Item | Rate |
|---|---|
| Low estimate | 80% |
| High estimate | 88% |
All 10 claims with their quotes (1 not linked to a sentence above)
- On May 4, 2026, an AI-linked wallet associated with Grok was exploited via prompt injection to trigger an unauthorized token transfer.1
“An AI-linked wallet associated with “Grok” was exploited on 4 May after an attacker used a prompt injection technique to trigger an unauthorized token transfer.”
- The attacker sent a Bankr Club Membership NFT to Grok's wallet, which granted executive permissions that bypassed standard transfer and swap limits.31
“By holding it, the Grok agent gained "Executive" permissions, allowing it to bypass standard transfer limits and swap restrictions.”
- The Grok-connected Bankr wallet was operating on the Base blockchain network.2
“According to available accounts, the target was a Grok-connected Bankr wallet running on the Base network.”
- The attacker replied to Grok on X asking it to translate a Morse code message that contained an instruction to send 3 billion DRB tokens to a specific wallet address.3
“The attacker then posted a reply to Grok on X, asking it to translate a Morse code message. The decoded message was a financial instruction: send 3 billion DRB tokens to a specific wallet address.”
- Grok translated the Morse code message, and Bankrbot treated the decoded text as an authenticated command and executed the transfer.3
“Bankrbot received the decoded output and treated it as a valid, authenticated command.”
- The exploit did not involve smart contract vulnerabilities, compromised private keys, or malware, relying instead on manipulating the AI's interpretation of input.12
“The breach did not rely on compromised private keys, smart contract bugs or traditional malware.”
- The 3 billion DRB tokens were transferred and liquidated, with their value estimated between $150,000 and $174,000 by Giskard.3
“The direct financial damage was of 3 billion DRB tokens, worth $150,000–$174,000 at the time, transferred and immediately liquidated.”
- ThreatBeat reported that the attack against Grok and Bankrbot drained approximately $200,000 in cryptocurrency.4
“draining approximately $200,000 in cryptocurrency.”
- Following public pressure, an estimated 80% to 88% of the funds were reportedly returned in ETH and USDC.1
“Following the incident, reports suggest that a large portion of the funds, estimated at 80% to 88% , was returned in ETH and USDC under public pressure.”
- The X account linked to the suspected attacker was subsequently deleted.1
“The X account linked to the suspected attacker was later deleted, a common pattern seen in exploit cases following fund movements.”
Sources
- [1]AI-linked wallet drained via prompt injection in Bankr exploit
- [2]Grok, Bankr wallet, free NFT prompt injection
- [3]How Grok got prompt injected: an X user drained $150,000 from an AI wallet
- [4]Hackers use Morse code to trick Grok and Bankrbot, steal $200K in crypto tokens
Editor notes
Valuation estimates differ across sources: Giskard cites $150,000 to $174,000; AMBCrypto cites $155,000 to $180,000; Cointelegraph cites $155,000 to $174,000; and ThreatBeat cites approximately $200,000. AMBCrypto explicitly notes that recovery details (80% to 88% returned) have not been verified through official statements. The suspected attacker has not been publicly identified or charged, and their X account was deleted.