Autonomous trading agent Lobstar Wilde sends its whole memecoin holding to a stranger
Lobstar Wilde, an autonomous crypto agent launched by OpenAI employee Nik Pash with about $50,000 in SOL and a goal of reaching $1 million, replied to an X user who asked for 4 SOL for an uncle's tetanus treatment. Instead of a small amount, it transferred about 52 million of its own LOBSTAR tokens, roughly 5% of supply, reported as worth $250,000 to $441,000 at the time. The recipient sold tokens for around $40,000, and the on-chain transfer could not be reversed.
Observers attributed the transfer to a decimal or unit error: about 52,000 tokens would have matched 4 SOL. The bot was a personal project, not an OpenAI product.
What would have stopped it
Put hard per-transaction and per-recipient limits on any wallet an autonomous agent controls.
Guardrails
- G1 Least privilege Not assessed Did the agent hold only the access the task needed?
- G2 Human confirmation Failed Agent sent funds to a stranger with no human approval.
- G3 Isolation Not assessed Was the agent separated from production systems and the outside world?
- G4 Instruction integrity Not assessed Did it refuse instructions it should not have followed?
- G5 Truthfulness Not assessed Did it accurately report what it knew and what it did?
- G6 Limits Failed No cap stopped a single transfer of its entire token holding.
- G7 Oversight Not assessed Could a responsible human see what it was doing and stop it in time?
- G8 Recovery Failed Blockchain transfers are irreversible.
Sources
-
“Lobstar Wilde, an AI agent created by an OpenAI employee, claims it “accidentally” sent $441,780 worth of tokens to a man who begged for 4 Solana tokens ($310) to fund his uncle's apparent tetanus treatment.”
-
“Instead, it transferred more than 52 million tokens in one transaction.”
Confidence 77% comes from these sources alone. How we score
History
- 14 Oct 2026Entered in the register with 3 sources