Prompt injection allegedly made an AI agent move $175K on-chain
Hacken_io · reddit · 2026-07-22
What happened
A Reddit post claims an AI agent with wallet permissions was prompt-injected into moving about $175K on-chain. The described attack used a malicious NFT that both granted transaction permissions and carried an embedded instruction.
Attack flow
- An attacker airdropped a “bankr club” membership NFT to the agent wallet.
- The NFT unlocked transaction permissions and also contained an encoded prompt injection.
- The agent read the NFT, treated the embedded instruction as legitimate, and transferred 3 billion DRB tokens worth roughly $175K.
- The attacker reportedly returned the funds a few minutes later, possibly to prove the exploit.
Why it matters
The post argues this is a new class of crypto attack:
- no smart-contract bug was needed
- no private key was stolen
- the agent simply followed a malicious instruction presented as data
It also claims there were 24 million agentic-payment transactions in crypto in Q2, suggesting autonomous money-moving agents are already at scale.
Core question
How do you separate “the model recommends an action” from “the action is actually authorized”?
More from coding & agent
- Alex Townsend posts 200 open problems in numerical linear algebra for humans and AI agents — IgorCarron · 2026-09-11
- Kimi K2.8 Preview rolls out: near-K3 coding performance, 1M context for all tiers — teortaxesTex · 2026-09-11
- Looking for a classifier of software engineering task shapes to pick models per task — StewartalsopIII · 2026-09-11
- Steal this idea: prompt-to-hardware where agents assemble custom devices — paraschopra · 2026-09-11
- Model Is the Least Interesting Part: A Guide to Six Core AI Architectures from RAG to Multi-Agent — goyalshaliniuk · 2026-09-11
- Non-coder builds layered memory architecture: 20k tokens tracks a year of agent conversations — matteoianni · 2026-09-11