An X user reportedly tricked AI chatbot xAI’s Grok into sending nearly $200,000 worth of crypto by exploiting its connection to an automated trading bot.
The incident involved Grok and an AI-powered system called Bankrbot, both of which had access to crypto wallets and transaction permissions on the Base network.
The attacker allegedly received 3 billion DRB tokens — worth around $200,000 at the time — after using a hidden Morse code instruction that bypassed safeguards and triggered the transfer.
The exploit was reportedly carried out by an X user known as “@Ilhamrfliansyh,” who later deleted their account after the transaction was completed.
According to reports, the user first sent a Bankr Club Membership NFT to Grok’s wallet, which expanded the AI’s permissions inside the Bankr system and allowed it to perform transfers and swaps.
The attacker then asked Grok on X to decode a Morse code message and forward it directly to Bankrbot.
Once translated, the hidden message instructed the bot to transfer 3 billion DRB tokens to a specific crypto wallet address.
The command was reportedly treated as legitimate and executed automatically on the Base blockchain network.
After receiving the funds, the attacker quickly sold the DRB tokens on the open market, temporarily impacting the token’s price.
Blockchain records later showed that assets linked to Grok’s wallet were moved and converted into other cryptocurrencies, including Ethereum and USDC.