Case · DiggingBeagle record
Public text crossed the Grok–Bankr boundary and triggered a real on-chain transfer
On May 4, attacker-controlled text was decoded by Grok and passed into Bankr's execution path, which transferred about 3 billion DRB from a Bankr-provisioned wallet on Base. The evidence points to a language-to-authority failure, not private-key theft or a Solidity exploit.
Timeline
- May 4, 2026Event type unspecified
Bankr executes the decoded transfer instruction
SlowMist and Fireblocks describe an unauthorized transfer of about 3 billion DRB on Base after Grok decoded attacker-controlled text into an instruction consumed by Bankr.
- May 4, 2026occurrence
Occurrence began
- May 4, 2026disclosure
Public disclosure
Claims & evidence
CLAIM-DRB-TRANSFEROn May 4, 2026, the Grok–Bankr agent chain executed an unauthorized transfer of about 3 billion DRB on Base after attacker-controlled encoded text was decoded into a transfer instruction.supported
Basis: reported finding
- supportsBehind the Grok Exploitation: An Analysis of AI Agent Permission Chain Abusesecondary reporting
Section 'Attack Flow'
- supportsGlobal Digital Asset Threat Report, Q2 2026 — Bankr AI Prompt Injectionsecondary reporting
Section 'Bankr AI Prompt Injection'
CLAIM-BANKR-PROVISIONED-WALLETSlowMist reported that the wallet labeled around the incident as a Grok wallet was provisioned and custodially managed through Bankr's wallet infrastructure rather than being an official xAI wallet.supported
Basis: reported finding
- supportsBehind the Grok Exploitation: An Analysis of AI Agent Permission Chain Abusesecondary reporting
Section 'About the “Grok Wallet”'
CLAIM-NO-KEY-OR-SOLIDITY-EXPLOITThe documented mechanism was abuse of the AI-agent permission chain rather than theft of the wallet's private key or exploitation of a smart-contract vulnerability.supported
Basis: inference
- supportsBehind the Grok Exploitation: An Analysis of AI Agent Permission Chain Abusesecondary reporting
Background and Attack Flow sections
- supportsGlobal Digital Asset Threat Report, Q2 2026 — Bankr AI Prompt Injectionsecondary reporting
Section 'Root cause'
Sources and citation
Material revision history
- Oct 5, 2026 · Published version · first publication · revision 66
Cite this record
DiggingBeagle. “Public text crossed the Grok–Bankr boundary and triggered a real on-chain transfer.” Published by DiggingBeagle Oct 5, 2026 · Public disclosure May 4, 2026 · Occurrence began May 4, 2026. https://diggingbeagle.com/cases/public-text-crossed-the-grok-bankr-boundary-and-triggered-an-onchain-transfer/