AI Risk Wire

Incidents

1 incident

Risk: Unauthorised transactions or spend Control: Alerts on unusual tool use Outcome: Not stated in sources

EffectiveNot effectiveNot effective (bypassed)Did not existNot stated in sourcesNot yet checkedAttacker's ownOrder: model · harness · application · target

DateIncidentRiskWhere it failedControls mentioned in sources
2026-05-01Grok and Bankr prompt-injected via Morse code to transfer DRB tokens; 14 Bankr wallets later drained Unauthorised transactions or spend
Not effective (bypassed)Payment mandates and transaction limits L3