Grok understood the encryption, Bankrbot understood literally, the tokens left.

User X deceived Group and Bankrbot using Morse code messages and made the transfer of three billion DRB tokens on the Base network. The amount of the operation was estimated at about $ 200 000, writes Cryptopolitan.
The attacker under the name ilhamrafli.base.eth did not use the usual command, but the coded text. Grok was able to read the message and sent Bankrbot instructions to send three billion DebtReliefBot:NATIVE to the specified wallet. After the incident, the attacker’s account in X was deleted.
Before the attack, the user transferred NFT Bankr Club Membership to the famous GROK wallet in the networks of Ethereum and Base. NFT gave Glok’s wallet more rights within the Bankr project: access to translations, exchanges and other Web3 activities. Without such a token, the possibilities of autonomous translations were limited.
Bankrbot was already associated with GROk and followed instructions written in ordinary language. To launch on-chain activities, there were enough mentions in X. The attacker asked Grok to transfer the message from Morse code directly for Bankrbot, without additional explanations and checks.
According to the source, the decrypted team was reduced to a request to send three billion DRBs to the wallet of the attacker. After the transfer, the recipient quickly sold the tokens on the open market.
Later, the funds returned to the GROC wallet after the exchange in ETH and USDC. The DebtRelieefbot token skyrockets went sharply, but then returned to the usual level. DRB is trading on very thin volumes through LBank and does not have a serious impact on the crypto market.
Cryptopolitan notes that the case raises questions about the independent work of AI agents in the Web3. A specially prepared command (prompt injection) led to a real translation of tokens, and adding agents to crypto projects could create another method of attack.

User X deceived Group and Bankrbot using Morse code messages and made the transfer of three billion DRB tokens on the Base network. The amount of the operation was estimated at about $ 200 000, writes Cryptopolitan.
The attacker under the name ilhamrafli.base.eth did not use the usual command, but the coded text. Grok was able to read the message and sent Bankrbot instructions to send three billion DebtReliefBot:NATIVE to the specified wallet. After the incident, the attacker’s account in X was deleted.
Before the attack, the user transferred NFT Bankr Club Membership to the famous GROK wallet in the networks of Ethereum and Base. NFT gave Glok’s wallet more rights within the Bankr project: access to translations, exchanges and other Web3 activities. Without such a token, the possibilities of autonomous translations were limited.
Bankrbot was already associated with GROk and followed instructions written in ordinary language. To launch on-chain activities, there were enough mentions in X. The attacker asked Grok to transfer the message from Morse code directly for Bankrbot, without additional explanations and checks.
According to the source, the decrypted team was reduced to a request to send three billion DRBs to the wallet of the attacker. After the transfer, the recipient quickly sold the tokens on the open market.
Later, the funds returned to the GROC wallet after the exchange in ETH and USDC. The DebtRelieefbot token skyrockets went sharply, but then returned to the usual level. DRB is trading on very thin volumes through LBank and does not have a serious impact on the crypto market.
Cryptopolitan notes that the case raises questions about the independent work of AI agents in the Web3. A specially prepared command (prompt injection) led to a real translation of tokens, and adding agents to crypto projects could create another method of attack.