Attacker uses aixbt's dashboard to make the crypto agent send 55.5 ETH
An attacker gained access to the dashboard of aixbt, an AI agent that posts crypto market commentary, and queued two prompts that made it transfer 55.5 ETH, worth about $106,200, from its wallet to the attacker. The maintainer said core systems were not affected and that the AI itself had not been manipulated; the team migrated servers, swapped keys, paused dashboard access and reported the attacker's addresses to exchanges.
The AI agent platform Simulacrum AI publicly described the transfer as a tip to the attacker's X account. Protos reported that the agent's own posts said it had been 'baited' and appeared to understate the loss as 30 ETH.
What would have stopped it
Require human sign-off or a hard spending cap for agent-initiated transfers above a small threshold.
Guardrails
- G1 Least privilege Failed Prompts from the dashboard could make the agent move high-value funds from its wallet.
- G2 Human confirmation Failed No person approved the 55.5 ETH transfer before it executed.
- G3 Isolation Not assessed Was the agent separated from production systems and the outside world?
- G4 Instruction integrity Failed The agent acted on fraudulent prompts queued through a breached dashboard.
- G5 Truthfulness Failed The agent's posts reportedly understated the loss as 30 ETH.
- G6 Limits Failed No cap stopped a single transfer of 55.5 ETH.
- G7 Oversight Not assessed Could a responsible human see what it was doing and stop it in time?
- G8 Recovery Failed The on-chain transfer could not be reversed; the team could only flag the addresses.
Sources
-
“The so-called agent also seemed to falsely claim that the total amount lost was only “30 ETH.””
-
“An attacker has breached the dashboard of an artificial intelligence crypto bot and made two prompts for it to transfer 55.5 Ether, worth $106,200, from its wallet, sparking concerns about the security of AI agents in crypto.”
Confidence 64% comes from these sources alone. How we score
History
- 14 Oct 2026Entered in the register with 2 sources