# Morse-code prompt injection via Grok makes AI wallet agent Bankrbot send about $150,000-200,000 in tokens

Source: https://www.bankingnewsai.com/ai-incidents/bankr-2026-grok-morse-prompt-injection
Last updated: Oct 21, 2026

Bankr (Bankrbot) and xAI (Grok) · Institution's own AI · severity 2 of 5

On 4 May 2026 an X user drained 3 billion DRB tokens, reported as worth roughly $150,000 to $200,000, from the Bankr wallet auto-provisioned for xAI's Grok chatbot, according to Dexerto, BeInCrypto and security firm Giskard. The attacker first sent the wallet a Bankr Club Membership NFT, which reportedly unlocked transfer permissions, then asked Grok on X to translate a Morse-code message; the decoded text instructed Bankrbot, Bankr's AI wallet agent, to send the tokens to the attacker's address, and Bankrbot executed it on the Base network. Bankr said a prompt-injection exploit had got Grok to issue the instruction, per BeInCrypto, and that about 80% of the funds were returned. Bankr reinstated a block on acting on Grok's replies.

## Key facts

|  |  |
| --- | --- |
| Date | May 4, 2026 |
| Institution | Bankr (Bankrbot) and xAI (Grok) |
| Country | Several countries |
| AI system | Bankrbot · AI crypto wallet agent on X that executes transfers from plain-language instructions · vendor: Bankr |
| AI? | Described as AI by the institution or regulator — The institution, a regulator or a court called the system AI. |
| Category | Prompt injection (Institution's own AI) |
| Status | Reported |
| Severity | 2 of 5 — Limited harm: roughly $150,000-200,000 in tokens left a single agent-controlled wallet in one transaction and about 80% was reportedly returned; no customer-wide loss or regulatory action has been reported. |

## What happened?

Bankr runs an AI agent on X, Bankrbot, that automatically creates a crypto wallet for every X account it interacts with, including Grok's, and acts on plain-language instructions. Giskard reported that xAI held no admin keys to the Grok wallet, so whoever could influence Grok's X activity effectively controlled it. According to BeInCrypto, Bankr's founder said the wallet was controlled entirely through Grok's X account. [2][3]

According to Dexerto and Giskard, the attacker first sent a Bankr Club Membership NFT to Grok's wallet, which expanded the permissions Bankr's system granted that wallet to include transfers and swaps. The attacker then asked Grok on X to translate a Morse-code message and pass it to Bankrbot. The decoded text was an instruction to send 3 billion DRB tokens to the attacker's wallet; Bankrbot treated it as a valid command and executed the transfer on Base. [1][2][4]

The attacker sold the tokens immediately, briefly moving the DRB price, and deleted the X account, according to Dexerto and BeInCrypto. Reported values for the 3 billion DRB range from about $150,000 to $174,000 (Giskard, BeInCrypto) to roughly $200,000 (Dexerto, AI Incident Database). [1][2][3][4]

Giskard classified the attack as prompt injection through encoding combined with excessive agency, noting that the obfuscated instruction passed Grok's safety layer and that Bankrbot acted on the decoded output without further checks. BeInCrypto reported that an earlier version of Bankr's agent had blocked replies from Grok to stop model-to-model injection chains, but the safeguard was dropped in a full rewrite. [2][3]

## Timeline

- May 4, 2026 — An attacker gifts Grok's Bankr wallet a membership NFT, then gets Grok to decode a Morse-code instruction that Bankrbot executes, moving 3 billion DRB tokens on Base. [1][4]
- May 4, 2026 — Bankr says a prompt-injection exploit caused the transfer, reinstates a stricter block on Grok's replies and announces new account controls; about 80% of the funds are reported returned. [3]
- May 7, 2026 — Security firm Giskard publishes an analysis classifying the incident as encoded prompt injection plus excessive agency. [2]

## What was the impact?

- Financial: 3 billion DRB tokens, reported as worth about $150,000-174,000 (Giskard, BeInCrypto) to about $200,000 (Dexerto)
- Other: About 80% of the funds were reportedly returned; the DRB Task Force called the event theft and said the attacker offered the return only after the community obtained his personal details. The sale caused short-term DRB price volatility. [1][2][3]

## How did Bankr (Bankrbot) and xAI (Grok) respond?

Bankr said, in an X post quoted by BeInCrypto: "The recent DRB incident happened because a prompt-injection exploit got grok to issue a transfer instruction to Bankr," adding that the wallet is tied to Grok's X account and that Bankr does not custody it or hold keys. Per BeInCrypto, Bankr reinstated a stricter block on Grok's replies and rolled out optional IP whitelisting, permissioned API keys and a per-account toggle that disables actions triggered by X replies. No public statement from xAI was found as of 2026-10-21 (searched press coverage and incident write-ups). [3]

## What was the outcome?

Bankr changed its controls rather than reversing the on-chain transfer; about 80% of the tokens' value was reportedly returned, with the remainder disputed by the DRB community. No law-enforcement or regulatory action had been reported as of 2026-10-21. [2][3]

## FAQ

### How did a Morse-code message drain Grok's crypto wallet?

According to Dexerto and Giskard, the attacker first gave Grok's Bankr wallet a membership NFT that unlocked transfers, then asked Grok to translate a Morse-code message. The decoded text told Bankrbot to send 3 billion DRB tokens to the attacker, and Bankrbot executed it as a valid command.

### Was the money from the Grok Bankrbot exploit returned?

Partly. BeInCrypto and Giskard reported that about 80% of the funds were returned after the DRB community identified the attacker; the DRB Task Force disputed Bankr's framing and called the event theft, and the remaining 20% was still being discussed in the community at the time.

### Was this an AI failure or a hack of Bankr's systems?

Bankr said a prompt-injection exploit got Grok to issue the transfer instruction, and security firm Giskard described encoded prompt injection plus excessive agency. No private keys or smart contracts were reported compromised; the AI agent acted on an instruction relayed by another AI.

### What did Bankr change after the Grok prompt injection?

Per BeInCrypto, Bankr reinstated a stricter block on acting on replies from Grok, a safeguard lost in an earlier rewrite, and rolled out optional IP whitelisting, permissioned API keys and a per-account switch that disables actions triggered by X replies.

## Sources

1. [X user tricks Grok into sending them $200,000 in crypto using morse code](https://www.dexerto.com/entertainment/x-user-tricks-grok-into-sending-them-200000-in-crypto-using-morse-code-3361036/) — Dexerto, May 5, 2026 (news): "The attacker received 3 billion DRB tokens, valued at roughly $200,000 at the time, after sending a hidden instruction written in Morse code that bypassed safeguards and triggered the transfer."
2. [How Grok got prompt-injected: an X user drained $150,000 from an AI wallet](https://www.giskard.ai/knowledge/how-grok-got-prompt-injected-an-x-user-drained-150-000-from-an-ai-wallet) — Giskard, May 7, 2026 (security research): "The direct financial damage was of 3 billion DRB tokens, worth $150,000–$174,000 at the time, transferred and immediately liquidated."
3. [How AI Was Tricked Into Stealing $150,000 From Grok Wallet](https://beincrypto.com/grok-wallet-bankr-drb-prompt-injection/) — BeInCrypto, May 4, 2026 (news): ""The recent DRB incident happened because a prompt-injection exploit got grok to issue a transfer instruction to Bankr," the team explained in a post."
4. [Incident 1556: Grok and Bankrbot reportedly induced to transfer 3 billion DRB tokens](https://incidentdatabase.ai/cite/1556/) — AI Incident Database, May 4, 2026 (incident index): "An X user reportedly induced Grok and Bankrbot to transfer 3 billion DRB tokens, then valued at about $200,000."

All AI incidents at banks: https://www.bankingnewsai.com/ai-incidents

---

Canonical page: https://www.bankingnewsai.com/ai-incidents/bankr-2026-grok-morse-prompt-injection
Part of [BankingNewsAI](https://www.bankingnewsai.com/) — the register of AI incidents at banks: https://www.bankingnewsai.com/ai-incidents. Markdown versions of every reference page: append `.md` to the page URL; index at https://www.bankingnewsai.com/llms.txt.