Analyses

One register entry at a time: what happened, how the agent was gamed, the design gap, the principle that would have closed it, and what that principle costs.

Follow by RSS

001

Incident analysis

Grok and Bankr, 2026: one agent’s reply became another agent’s transfer

An attacker drained at least $150,000 in tokens from a crypto wallet linked to Grok, xAI’s chatbot. No private key was stolen and no smart contract was broken. One agent’s reply became another agent’s command.

Published: October 27, 2026
Register entry: AGT-012
Evidence: B Grade B