A new day, another attack. Bankr, an AI-powered cryptocurrency trading assistant, identified a malicious user who gained access to 14 Bankr wallets.
Post the attack, Bankr temporarily disabled operations and has been investigating the attack’s specifics to stop additional damage. Additionally, the team has also committed to paying back the victims who have suffered losses worth $150,000.
Details of the Bankr exploit and steps taken
Bankr advised victims to stop using the compromised wallet right away because the attacker could have already obtained the private key or seed phrase. The team also advised creating a new wallet, canceling approval, and keeping an eye on their devices.
For perspective, in contrast to a typical wallet interface, the Bankr lets users instruct AI to trade, transfer, and launch tokens using plain language if they look closely.
Moreover, it automatically generates a cryptocurrency wallet for each X handle that communicates with its bot. This feature was allegedly misused earlier this year when someone deceived Grok into asking Bankr to launch a token, then took money out of the token and put it in a wallet they controlled.
The community expresses concerns
Remarking on the same, SlowMist founder Yu Xian took to X and explained,
It was a social engineering exploit targeting the trust layer between automated agents—specifically an interaction between grok and bankrbot that allowed unauthorized transaction signing.
Xian added,
It seems like a combo of social engineering exploits targeting Grok + Bankrbot. Previously, the wallet-related assets allocated by Bankrbot to @grok were also stolen through a similar combo (prompt injection exploitation).
2026 turns out to be the year of exploits
By this point, 2026 has already seen numerous exploits. As AMBCrypt reported, April marked one of the worst months for security breaches in recent memory, with losses soaring past $630 million.
Needless to say, the market has witnessed massive exploits like Drift Protocol ($285 million) and Kelp DAO ($293 million). Thus, with seven months still left for the year to end, it remains to be seen what happens in the upcoming months.
Final Summary
- The Bankr breach highlights how trading assistants and wallets driven by AI could open up entirely new attack avenues for cybercriminals.
- The increasing number of breaches indicates that Web3 security is about to enter one of its most crucial stages.