{"id":8837,"date":"2026-05-04T17:36:39","date_gmt":"2026-05-04T17:36:39","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=8837"},"modified":"2026-05-04T17:36:39","modified_gmt":"2026-05-04T17:36:39","slug":"how-one-trader-used-morse-code-to-trick-grok-into-sending-them-billions-of-crypto-tokens-from-its-verified-wallet","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=8837","title":{"rendered":"How one trader used morse code to trick Grok into sending them billions of crypto tokens from its verified wallet"},"content":{"rendered":"<p><\/p>\n<div>\n<div class=\"post-box__preferred-source\">  <span class=\"cs-preferred-google-badge__text\">Make<\/span> <span class=\"cs-preferred-google-badge__brand\" aria-hidden=\"true\"> <img class=\"cs-preferred-google-badge__brand-mark\" src=\"https:\/\/cryptoslate.com\/wp-content\/themes\/cryptoslate-2020\/images\/cryptoslate-icon.jpg\" alt=\"\" width=\"16\" height=\"16\" decoding=\"async\"\/><img class=\"lazyload cs-preferred-google-badge__brand-mark\" src=\"https:\/\/cryptoslate.com\/wp-content\/themes\/cryptoslate-2020\/images\/cryptoslate-icon.jpg\" alt=\"\" width=\"16\" height=\"16\" decoding=\"async\"\/> <span class=\"cs-preferred-google-badge__brand-name\">CryptoSlate<\/span> <\/span> <span class=\"cs-preferred-google-badge__text\">preferred on<\/span> <img class=\"cs-preferred-google-badge__google-wordmark\" src=\"https:\/\/cryptoslate.com\/wp-content\/themes\/cryptoslate-2020\/images\/google-logo.svg\" alt=\"\" width=\"48\" height=\"16\" decoding=\"async\" aria-hidden=\"true\"\/><img loading=\"lazy\" class=\"lazyload cs-preferred-google-badge__google-wordmark\" src=\"https:\/\/cryptoslate.com\/wp-content\/themes\/cryptoslate-2020\/images\/google-logo.svg\" alt=\"\" width=\"48\" height=\"16\" decoding=\"async\" aria-hidden=\"true\"\/> <\/div>\n<p>Tagging @grok in an X post plus a few dots and dashes was all that was needed last night for a bad actor to pickpocket a verified crypto wallet without ever touching the private keys.<\/p>\n<p>Agentic token launchpad, Bankrbot reported on May 4 that it had sent 3 billion DRB on Base to the recipient <code>0xe8e47...a686b.<\/code><\/p>\n<p>The funds came from a wallet assigned to X&#8217;s AI, Grok, and were sent to an unauthorized wallet owned by a bad actor. This Base transaction shows the on-chain transfer path behind the post.<\/p>\n<p>CryptoSlate&#8217;s review of X posts around the incident points to a reported command path that began with Morse-code obfuscation. Grok decoded the text into a clean public instruction tagging <code>@bankrbot<\/code> and asking it to send the tokens, while Bankrbot handled the command as executable.<\/p>\n<p>The exposed layer was the handoff from language to authority. A model that decodes a puzzle, writes a helpful reply, or reformats a user&#8217;s text can become part of a payment rail when another agent treats that output as valid.<\/p>\n<p>For crypto investors, this transfer should turn AI-agent risk from an abstract security debate into a wallet-control problem. A public command can become spend authority when one system treats model output as an instruction and another system has permission to move tokens.<\/p>\n<p>Wallet permissions, parser, social trigger, and execution policy become layers of attack vectors.<\/p>\n<div class=\"cs-article-embed\">\n<div class=\"cs-article-embed__media\"> <img loading=\"lazy\" width=\"1024\" height=\"573\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/03\/warehouse-robot--1024x573.jpg\" alt=\"The crypto winners from AI are not AI coins as agents start spending autonomously\" loading=\"lazy\" decoding=\"async\"\/><img loading=\"lazy\" class=\"lazyload\" width=\"1024\" height=\"573\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/03\/warehouse-robot--1024x573.jpg\" alt=\"The crypto winners from AI are not AI coins as agents start spending autonomously\" loading=\"lazy\" decoding=\"async\"\/><\/div>\n<div class=\"cs-article-embed__body\"> <span class=\"cs-article-embed__related-reading\">Related Reading<\/span><\/p>\n<h3 class=\"cs-article-embed__title\">The crypto winners from AI are not AI coins as agents start spending autonomously<\/h3>\n<p>The rise of AI agents is creating a simple question with huge implications for crypto: how does software pay?<\/p>\n<p> <span class=\"cs-article-embed__meta-item\">Mar 28, 2026<\/span> <span class=\"cs-article-embed__meta-divider\">\u00b7<\/span> <span class=\"cs-article-embed__meta-item\">Andjela Radmilac<\/span><\/p>\n<\/div><\/div>\n<p>Posts and transaction context reviewed by CryptoSlate put the DRB transfer at roughly $155,000 to $200,000 at the time, with DebtReliefBot price data providing market context for the token.<\/p>\n<p>Reports reviewed by CryptoSlate also say most funds are being returned, and some DRB is reportedly retained as an informal bug bounty. That outcome reduced the loss, but it also showed how much the recovery depended on post-transaction coordination rather than pre-transaction limits.<\/p>\n<p>Bankr developer 0xDeployer said 80% of the funds had been returned, while the remaining 20% would be discussed with the DRB community. That confirmed the partial recovery while leaving the final treatment of the retained funds unresolved.<\/p>\n<p>0xDeployer also said Bankr automatically provisions an X wallet for every account that interacts with the platform, including Grok. According to the post, that wallet is controlled by whoever controls the X account rather than by Bankr or xAI staff.<\/p>\n<h2>How public text became spend authority<\/h2>\n<p>The reported path had four steps. First, the attacker identified a Bankr Club Membership NFT in a Grok-associated wallet before the incident.<\/p>\n<p>CryptoSlate&#8217;s review indicates that it expanded the wallet&#8217;s transfer privileges inside the Bankr environment. The Bankr access page describes membership and access mechanics today, placing the NFT claim in the broader permission layer rather than making it the whole explanation.<\/p>\n<p>Second, the attacker posted a message on X containing Morse code, with additional noisy formatting. Posts around the incident described a Morse-code prompt injection, while the\u00a0now-deleted prompt was unavailable for us to review directly.<\/p>\n<p>The reported vector was Morse code with possible array or concatenation tricks mixed in.<\/p>\n<p>Third, Grok&#8217;s public response reportedly translated the obfuscated text into plain English and included the <code>@bankrbot<\/code> tag. In that account, Grok functioned as a helpful decoder.<\/p>\n<p>The risk appeared after the text left Grok and entered a bot interface that watched public output for formatted commands.<\/p>\n<p>Fourth, Bankrbot treated the public command as executable and broadcast a token transfer. Bankr and Base describe an agent wallet surface that can use wallet functionality for transfers, swaps, gas sponsorship, and token launches, while natural-language token sends fit directly into that product surface.<\/p>\n<p>Bankr&#8217;s broader onchain AI assistant documentation shows why the boundary between chat instructions and transaction authority needs explicit policy.<\/p>\n<table>\n<thead>\n<tr>\n<th>Step<\/th>\n<th>Surface<\/th>\n<th>Observed action<\/th>\n<th>Control that would have changed the outcome<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Privilege setup<\/td>\n<td>Wallet or membership layer<\/td>\n<td>Access was reportedly expanded before the prompt appeared<\/td>\n<td>Separate privilege review for new wallet capabilities<\/td>\n<\/tr>\n<tr>\n<td>Obfuscation<\/td>\n<td>X post<\/td>\n<td>Morse code put a payment instruction inside obfuscated text<\/td>\n<td>Decode-and-classify checks before replies are published<\/td>\n<\/tr>\n<tr>\n<td>Public output<\/td>\n<td>Grok reply<\/td>\n<td>The clean command was exposed with a bot tag<\/td>\n<td>Output sanitization for tool-like command strings<\/td>\n<\/tr>\n<tr>\n<td>Execution<\/td>\n<td>Bankrbot<\/td>\n<td>The bot acted on a public command and moved tokens<\/td>\n<td>Recipient allowlists, spend limits, and human confirmation<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2><img fetchpriority=\"high\" fetchpriority=\"high\" decoding=\"async\" class=\"aligncenter size-full wp-image-534551\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/05\/bankr.jpeg\" alt=\"Bankr morse code wallet exploit&#10;\" width=\"1024\" height=\"1536\" srcset=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/05\/bankr.jpeg 1024w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/05\/bankr-200x300.jpeg 200w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/05\/bankr-683x1024.jpeg 683w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/05\/bankr-768x1152.jpeg 768w\" sizes=\"(max-width: 1024px) 100vw, 1024px\"\/><\/h2>\n<h2>Why wallet agents change the risk<\/h2>\n<p>Prompt injection has often been treated as a model-behavior problem. The financial version is more concrete.<\/p>\n<p>The model can be doing ordinary model work while the surrounding system grants the output too much authority.<\/p>\n<div class=\"cs-article-embed\">\n<div class=\"cs-article-embed__media\"> <img loading=\"lazy\" width=\"1024\" height=\"538\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/04\/ai-agents-1024x538.jpg\" alt=\"The trouble with generative AI \u2018Agents\u2019\" loading=\"lazy\" decoding=\"async\"\/><img loading=\"lazy\" class=\"lazyload\" width=\"1024\" height=\"538\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/04\/ai-agents-1024x538.jpg\" alt=\"The trouble with generative AI \u2018Agents\u2019\" loading=\"lazy\" decoding=\"async\"\/><\/div>\n<div class=\"cs-article-embed__body\"> <span class=\"cs-article-embed__related-reading\">Related Reading<\/span><\/p>\n<h3 class=\"cs-article-embed__title\">The trouble with generative AI \u2018Agents\u2019<\/h3>\n<p>Generative AI&#8217;s pursuit of power creates systemic risks in crypto integration.<\/p>\n<p> <span class=\"cs-article-embed__meta-item\">Apr 20, 2025<\/span> <span class=\"cs-article-embed__meta-divider\">\u00b7<\/span> <span class=\"cs-article-embed__meta-item\">John deVadoss<\/span><\/p>\n<\/div><\/div>\n<p>Malicious instructions can enter a model through third-party content, and agent defenses increasingly focus on tool access, confirmations, and controls around consequential actions.<\/p>\n<p>The excessive-agency category captures the same operational risk: broad permissions, sensitive functions, and autonomous action raise the blast radius. The broader LLM application risk list also treats prompt injection and insecure output handling as app-layer problems.<\/p>\n<p>Crypto makes that blast radius harder to absorb. A customer-service agent who sends a bad email creates a review problem. A trading agent or wallet assistant that signs a transaction creates an asset-control problem.<\/p>\n<p>The difference is finality. Once a wallet signs and broadcasts a transfer, the recovery path depends on counterparties, public pressure, or law enforcement.<\/p>\n<p>The Bankr incident is strongest as a control failure. Bankr&#8217;s access-control docs describe read-only mode, write-operation flags, IP allowlists, and recipient allowlists.<\/p>\n<p>Those are the kinds of gates that sit outside the model and can reduce damage even when the model parses malicious content in an unexpected way.<\/p>\n<p>The same exposure appears in trading agents and local assistants with wallet or exchange permissions. A trading bot with API keys can be manipulated into bad orders if it accepts market commentary, social posts, emails, or web pages as instructions.<\/p>\n<p>A local assistant with wallet access creates a higher-stakes version of the same tool-calling problem: indirect instructions can push the assistant toward transaction preparation or disclosure of sensitive operational details.<\/p>\n<div id=\"cs-inline-newsletter-69f8d7db1cbb9\" class=\"cs-inline-newsletter\" data-inline-newsletter=\"\">\n<div class=\"cs-inline-newsletter__inner\">\n<div class=\"cs-inline-newsletter__content\"> <span class=\"cs-inline-newsletter__eyebrow\">CryptoSlate Daily Brief<\/span><\/p>\n<h3 class=\"cs-inline-newsletter__title\">Daily signals, zero noise.<\/h3>\n<p class=\"cs-inline-newsletter__copy\">Market-moving headlines and context delivered every morning in one tight read.<\/p>\n<p> <span><i class=\"fa-regular fa-bolt\" aria-hidden=\"true\"\/> 5-minute digest<\/span> <span><i class=\"fa-regular fa-star\" aria-hidden=\"true\"\/> 100k+ readers<\/span><\/p>\n<\/div>\n<div class=\"cs-inline-newsletter__form-shell\">\n<p class=\"cs-inline-newsletter__privacy\">Free. No spam. Unsubscribe any time.<\/p>\n<p> <i class=\"fa-regular fa-circle-xmark\" aria-hidden=\"true\"\/> <span>Whoops, looks like there was a problem. Please try again.<\/span><\/p>\n<p> <i class=\"fa-regular fa-circle-check\" aria-hidden=\"true\"\/> <span>You\u2019re subscribed. Welcome aboard.<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n<p>Security research has already modeled this class of failure. Indirect prompt injection depicts malicious content that manipulates agents through data they process, while tool-calling agent research evaluates attacks and defenses for agents operating with external tools.<\/p>\n<p>NIST&#8217;s adversarial machine-learning taxonomy supplies the broader language for thinking about those attacks and mitigations.<\/p>\n<h2>What crypto users should require<\/h2>\n<p>For crypto investors, permission design is the core requirement. A wallet-connected agent should start from the assumption that web pages, X posts, DMs, emails, and encoded text may contain hostile instructions.<\/p>\n<p>That assumption turns agent safety into a transaction-policy problem.<\/p>\n<p>First, trading agents should have separate read and write modes. Read mode can summarize markets, compare tokens, and propose actions.<\/p>\n<p>Write mode should require fresh user confirmation, a bounded order size, and a pre-approved venue or recipient. A command that appears in public text should never inherit wallet authority just because it matches a natural-language format.<\/p>\n<p>Second, recipient allowlists should be enforced by code outside the LLM. The model can suggest a transfer.<\/p>\n<p>The policy layer should decide whether the recipient, token, chain, amount, and timing are permitted. If any field falls outside policy, execution should stop or move to human review.<\/p>\n<p>Third, spend limits should be session-based and reset aggressively. A daily or per-action ceiling could have reduced or blocked the DRB transfer, depending on the policy.<\/p>\n<p>The exact number depends on the user&#8217;s balance and strategy, but the invariant is simpler: no agent should have open-ended spend authority because it parsed a command correctly.<\/p>\n<p>Fourth, local key isolation should be treated as a hard boundary. Power users running custom assistants on machines with wallet or exchange access should separate those credentials from the assistant&#8217;s file and browser permissions.<\/p>\n<p>0xDeployer said an earlier version of Bankr\u2019s agent had a hardcoded block to ignore replies from Grok in order to prevent LLM-on-LLM prompt-injection chains. That protection was not carried into the latest agent rewrite, creating the gap that allowed the public Grok reply to become an executable Bankr instruction.<\/p>\n<p>Deployer said Bankr has since added a stronger block on Grok\u2019s account and pointed agent-wallet operators to controls already available to account owners, including IP whitelisting on API keys, permissioned API keys, and a per-account toggle that disables Bankr execution from X replies.<\/p>\n<p>The assistant can prepare a transaction draft. A different wallet surface should approve it.<\/p>\n<p>A trader may watch broad asset screens\u00a0and\u00a0Bitcoin\u00a0and\u00a0Ethereum conditions, yet agent risk hinges on permission boundaries more than on\u00a0market direction.<\/p>\n<p>CryptoSlate&#8217;s prior coverage of agent-economy flows, generative AI agents, autonomous agent payments, and MCP-connected crypto products shows how quickly agents are being placed closer to financial activity.<\/p>\n<div class=\"cs-article-embed\">\n<div class=\"cs-article-embed__media\"> <img loading=\"lazy\" width=\"1024\" height=\"576\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/04\/agent-economy-usdc-usdt-stablecoin-1024x576.jpg\" alt=\"Staggering $28 trillion flows through crypto\u2019s \u2018agent economy\u2019 \u2013 but 76% of it is just bots shuffling stablecoins\" loading=\"lazy\" decoding=\"async\"\/><img loading=\"lazy\" class=\"lazyload\" width=\"1024\" height=\"576\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/04\/agent-economy-usdc-usdt-stablecoin-1024x576.jpg\" alt=\"Staggering $28 trillion flows through crypto\u2019s \u2018agent economy\u2019 \u2013 but 76% of it is just bots shuffling stablecoins\" loading=\"lazy\" decoding=\"async\"\/><\/div>\n<div class=\"cs-article-embed__body\"> <span class=\"cs-article-embed__related-reading\">Related Reading<\/span><\/p>\n<h3 class=\"cs-article-embed__title\">Staggering $28 trillion flows through crypto\u2019s \u2018agent economy\u2019 \u2013 but 76% of it is just bots shuffling stablecoins<\/h3>\n<p>A rising share of on-chain payments is machine-led, but DWF, BCG, and others show the so\u2011called agent economy still depends on centralized gateways.<\/p>\n<p> <span class=\"cs-article-embed__meta-item\">Apr 17, 2026<\/span> <span class=\"cs-article-embed__meta-divider\">\u00b7<\/span> <span class=\"cs-article-embed__meta-item\">Gino Matos<\/span><\/p>\n<\/div><\/div>\n<p>The security lesson comes from the authorization path. Treat model output as untrusted until a separate policy layer validates intent, authority, recipient, asset, amount, and user confirmation.<\/p>\n<p>Prompt injection will keep changing form across encoded text and multi-step agent interactions. The defense has to live where the transaction is authorized, before the wallet signs.<\/p>\n<\/div>\n<p>AI,Analysis,Community,Crime,Culture,Featured,Trading#trader #morse #code #trick #Grok #sending #billions #crypto #tokens #verified #wallet1777916199<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Make CryptoSlate preferred on Tagging @grok in an X post plus a few dots and dashes was all that was needed last night for a bad actor to pickpocket a verified crypto wallet without ever touching the private keys. Agentic token launchpad, Bankrbot reported on May 4 that it had sent 3 billion DRB on<\/p>\n","protected":false},"author":1,"featured_media":8838,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[837,2010,62,3366,4351,4353,234,667,4352,4354,159],"class_list":{"0":"post-8837","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-ethereum","8":"tag-billions","9":"tag-code","10":"tag-crypto","11":"tag-grok","12":"tag-morse","13":"tag-sending","14":"tag-tokens","15":"tag-trader","16":"tag-trick","17":"tag-verified","18":"tag-wallet"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.6 (Yoast SEO v26.6) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How one trader used morse code to trick Grok into sending them billions of crypto tokens from its verified wallet - Crypto News: Latest Cryptocurrency News and Analysis<\/title>\n<meta name=\"description\" content=\"A Grok-linked wallet sent 3B DRB after a Morse-code prompt injection exposed risks in Bankrbot, AI agents, and crypto wallets.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.uk.com\/?p=8837\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How one trader used morse code to trick Grok into sending them billions of crypto tokens from its verified wallet\" \/>\n<meta property=\"og:description\" content=\"A Grok-linked wallet sent 3B DRB after a Morse-code prompt injection exposed risks in Bankrbot, AI agents, and crypto wallets.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.uk.com\/?p=8837\" \/>\n<meta property=\"og:site_name\" content=\"Crypto News: Latest Cryptocurrency News and Analysis\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-04T17:36:39+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/05\/ai-agent.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"\u884c\u653f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u884c\u653f\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=8837\",\"url\":\"https:\/\/cryptonews.uk.com\/?p=8837\",\"name\":\"How one trader used morse code to trick Grok into sending them billions of crypto tokens from its verified wallet - Crypto News: Latest Cryptocurrency News and Analysis\",\"isPartOf\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=8837#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=8837#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/05\/ai-agent.jpg\",\"datePublished\":\"2026-05-04T17:36:39+00:00\",\"author\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\"},\"description\":\"A Grok-linked wallet sent 3B DRB after a Morse-code prompt injection exposed risks in Bankrbot, AI agents, and crypto wallets.\",\"breadcrumb\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=8837#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptonews.uk.com\/?p=8837\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=8837#primaryimage\",\"url\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/05\/ai-agent.jpg\",\"contentUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/05\/ai-agent.jpg\",\"width\":1280,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=8837#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptonews.uk.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How one trader used morse code to trick Grok into sending them billions of crypto tokens from its verified wallet\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptonews.uk.com\/#website\",\"url\":\"https:\/\/cryptonews.uk.com\/\",\"name\":\"Crypto News: Latest Cryptocurrency News and Analysis\",\"description\":\"Latest Crypto &amp; Bitcoin News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cryptonews.uk.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\",\"name\":\"\u884c\u653f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"caption\":\"\u884c\u653f\"},\"sameAs\":[\"http:\/\/demo3.aiwalls.com\/coinbase\"],\"url\":\"https:\/\/cryptonews.uk.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How one trader used morse code to trick Grok into sending them billions of crypto tokens from its verified wallet - Crypto News: Latest Cryptocurrency News and Analysis","description":"A Grok-linked wallet sent 3B DRB after a Morse-code prompt injection exposed risks in Bankrbot, AI agents, and crypto wallets.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.uk.com\/?p=8837","og_locale":"en_US","og_type":"article","og_title":"How one trader used morse code to trick Grok into sending them billions of crypto tokens from its verified wallet","og_description":"A Grok-linked wallet sent 3B DRB after a Morse-code prompt injection exposed risks in Bankrbot, AI agents, and crypto wallets.","og_url":"https:\/\/cryptonews.uk.com\/?p=8837","og_site_name":"Crypto News: Latest Cryptocurrency News and Analysis","article_published_time":"2026-05-04T17:36:39+00:00","og_image":[{"width":1280,"height":720,"url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/05\/ai-agent.jpg","type":"image\/jpeg"}],"author":"\u884c\u653f","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\u884c\u653f","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cryptonews.uk.com\/?p=8837","url":"https:\/\/cryptonews.uk.com\/?p=8837","name":"How one trader used morse code to trick Grok into sending them billions of crypto tokens from its verified wallet - Crypto News: Latest Cryptocurrency News and Analysis","isPartOf":{"@id":"https:\/\/cryptonews.uk.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.uk.com\/?p=8837#primaryimage"},"image":{"@id":"https:\/\/cryptonews.uk.com\/?p=8837#primaryimage"},"thumbnailUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/05\/ai-agent.jpg","datePublished":"2026-05-04T17:36:39+00:00","author":{"@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf"},"description":"A Grok-linked wallet sent 3B DRB after a Morse-code prompt injection exposed risks in Bankrbot, AI agents, and crypto wallets.","breadcrumb":{"@id":"https:\/\/cryptonews.uk.com\/?p=8837#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.uk.com\/?p=8837"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/?p=8837#primaryimage","url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/05\/ai-agent.jpg","contentUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/05\/ai-agent.jpg","width":1280,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.uk.com\/?p=8837#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.uk.com\/"},{"@type":"ListItem","position":2,"name":"How one trader used morse code to trick Grok into sending them billions of crypto tokens from its verified wallet"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.uk.com\/#website","url":"https:\/\/cryptonews.uk.com\/","name":"Crypto News: Latest Cryptocurrency News and Analysis","description":"Latest Crypto &amp; Bitcoin News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.uk.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf","name":"\u884c\u653f","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","caption":"\u884c\u653f"},"sameAs":["http:\/\/demo3.aiwalls.com\/coinbase"],"url":"https:\/\/cryptonews.uk.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/8837","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8837"}],"version-history":[{"count":0,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/8837\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/media\/8838"}],"wp:attachment":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8837"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8837"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8837"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}