Crypto AI Platform Bankr Locks Down System After Hacker Breaches 14 Crypto Wallets

bitcoinistPublicado em 2026-05-20Última atualização em 2026-05-20

Resumo

Crypto AI trading platform Bankr has locked down its system after a hacker breached 14 user wallets. The attack, which targeted wallets automatically created via interactions with Bankr's AI bot on X, appears to be a social engineering scheme exploiting the platform's connection with Grok. Security experts suspect the use of "prompt injection" to manipulate the AI into approving unauthorized transactions. Losses from individual wallets reached as high as $150,000, with a total of $440,000 identified in three attacker-controlled addresses. Tech entrepreneur Austen Allred was among the victims. Bankr has halted all transactions, pledged full reimbursement for lost funds, and advised affected users to set up new wallets and transfer any remaining assets. This incident follows a series of major crypto exploits in recent months.

Tech entrepreneur Austen Allred was among the victims. His wallet, tied to a project called Kelly Claude AI assistant, was drained of Ether — though the hacker left his memecoin holdings untouched. Allred said there was no sign anyone else had logged into his Bankr account, suggesting the attacker got to the private keys through other means.

How The Attack Unfolded

Bankr is a crypto trading tool that lets users send plain-language instructions — like “swap this token” or “transfer funds” — to an AI that carries out the trades.

The platform also creates a crypto wallet automatically for every X account that interacts with its bot.

That feature had already drawn attention earlier this year, when someone reportedly tricked Grok into telling Bankr to launch a token, then pulled funds from it into a wallet they controlled.

Tuesday’s incident appears to follow a similar pattern. Yu Xian, founder of blockchain security firm SlowMist, said the breach was likely a social engineering scheme aimed at the AI agent.

ETHUSD now trading at $2,129. Chart: TradingView

According to Xian, the attacker exploited the trust connection between Grok and Bankrbot to push through unauthorized transaction approvals.

He identified three wallet addresses linked to the attacker that together held $440,000 in crypto.

Xian also pointed to prompt injection as part of the method — a technique where malicious instructions are fed to an AI to manipulate its behavior.

update: we’ve identified an attacker was able to access 14 bankr wallets.

we’ve temporarily locked things down while we work through the details. we will be reimbursing any and all lost funds.

will provide more updates as we have them. https://t.co/gVMLexiglT

— Bankr (@bankrbot) May 19, 2026

Bankr Pledges Full Reimbursement

Bankr confirmed the breach in a post on X, saying it had identified an attacker who accessed 14 wallets. The platform said it shut down all transaction activity — swaps, transfers, and token deployments — while the investigation continues. It also pledged to cover all losses.

Users were warned not to sign any transactions for now. For those with wallets already hit, Bankr told them to stop using the affected accounts entirely, set up a new wallet with a fresh seed phrase on a clean device, and transfer any remaining tokens or NFTs out immediately.

If assets can’t be moved, revoking existing approvals was advised. Bankr also flagged the possibility of malware, urging users to check their computers and phones for suspicious software or browser extensions.

What Users Lost

Some users reported losing as much as $150,000 from a single wallet. The exact total across all 14 breached wallets has not been confirmed.

The attack adds to a rough stretch for the crypto space. Bad actors stole more than $168 million in the first quarter of the year.

April brought two of the biggest hits so far — a $280 million exploit of Drift Protocol and a $292 million breach of Kelp.

Just a day before the Bankr incident, the Ethereum bridge of Verus Protocol was also reportedly hit.

Featured image from Unsplash, chart from TradingView

Perguntas relacionadas

QWhat is Bankr and how does it function as described in the article?

ABankr is a crypto trading tool that allows users to send plain-language instructions, like 'swap this token' or 'transfer funds', to an AI which then carries out the trades. The platform also automatically creates a crypto wallet for every X (formerly Twitter) account that interacts with its bot.

QAccording to the article, what was the likely method used by the attacker to breach the Bankr wallets?

AAccording to Yu Xian, founder of SlowMist, the breach was likely a social engineering scheme aimed at the AI agent. The attacker exploited the trust connection between Grok and Bankrbot to push through unauthorized transaction approvals, and prompt injection—feeding malicious instructions to manipulate the AI's behavior—was part of the method.

QWhat actions did Bankr take in response to the security breach?

ABankr confirmed the breach, identified that an attacker accessed 14 wallets, and temporarily shut down all transaction activity including swaps, transfers, and token deployments while investigating. They pledged to reimburse all lost funds and warned users not to sign any transactions.

QWhat advice did Bankr give to users whose wallets were affected by the hack?

ABankr advised affected users to stop using the compromised accounts entirely, set up a new wallet with a fresh seed phrase on a clean device, and immediately transfer any remaining tokens or NFTs out. If assets couldn't be moved, they advised revoking existing approvals and checking devices for malware or suspicious software/extensions.

QBesides the Bankr incident, what other major crypto exploits were mentioned as part of a 'rough stretch' for the crypto space?

AThe article mentions that bad actors stole over $168 million in Q1 of the year. In April, there were two major exploits: a $280 million exploit of Drift Protocol and a $292 million breach of Kelp. Just a day before the Bankr incident, the Ethereum bridge of Verus Protocol was also reportedly hit.

Leituras Relacionadas

Why Did Zhipu Surge Nearly 30% in a Single Day?

"Global AI Model Unicorn" Zhipu's stock surged nearly 30% in a single day, reaching a new market cap high. The catalyst was the launch of its GLM-5.1-highspeed API, boasting a generation speed of **400 tokens per second**, setting a new global benchmark. This speed, roughly 3-5 times faster than industry leaders like OpenAI's GPT-4o and Anthropic's Claude, is achieved **without compromising the full-scale model's capabilities**. In the era of AI Agents requiring dozens of self-calls, such latency reduction is critical, transforming speed from a system metric into a determinant of intelligence limits. The breakthrough stems from a three-layer technical overhaul: 1. **TileRT Inference Engine**: Compiles the entire model into a continuous, always-on computation pipeline using "Warp Specialization," minimizing GPU idle time by having different processor groups handle data loading, computation, and communication in parallel. 2. **Heterogeneous Parallelism for MLA**: To efficiently run the GLM-5.1 model using the MLA attention mechanism, TileRT employs a heterogeneous strategy. One GPU handles sparse indexing/routing, while the others perform dense computation, optimizing for MLA's unique workflow. 3. **ZCube Network Architecture**: Replaces the standard Spine-Leaf (ROFT) network topology with a flat, dual-group interconnect. This design creates a single optimal path between any two GPUs, eliminating network congestion at scale and reducing latency. The business impact is significant: a 15% increase in cluster throughput (free extra capacity), a 40.6% reduction in tail latency (improved stability), and a one-third cut in networking hardware costs. Long-term, this innovation challenges the dominance of NVIDIA's integrated hardware-software stack (GPU+NVLink+InfiniBand), potentially benefiting manufacturers of high-density Leaf switches and optical modules while lowering the software barrier for domestic AI chips like Huawei's Ascend. The innovation proves that more can be achieved with the same compute, reshaping the infrastructure beyond just GPUs.

marsbitHá 28m

Why Did Zhipu Surge Nearly 30% in a Single Day?

marsbitHá 28m

The Powell Era Concludes: Warsh Takes Over the Fed, What It Means for Global Finance and the Crypto Market?

The podcast discusses the implications of Jerome Powell's departure and Kevin Warsh's appointment as Federal Reserve Chair for global markets and crypto. It highlights a significant divergence between bond markets, which price in global tightening and persistent inflation, and equity markets, driven by AI hype—a disparity reminiscent of the dot-com bubble. The analysis introduces the "Bliss Trade" concept, a structural expectation of government stimulus during crises, which underpins risk asset valuations and currency debasement trades. Inflation is seen as sticky, driven by deglobalization and further complicated by geopolitical tensions, unlikely to fall quickly even if immediate crises subside. Powell's tenure is critiqued for misjudging inflation and overseeing the de-banking of crypto firms, despite defending Fed independence. Regarding crypto, Bitcoin is viewed as a macro asset and a hedge against currency debasement, but its current muted performance stems from competition with higher-beta assets like AI stocks. The potential Clarity Act is seen as more beneficial for Ethereum than Bitcoin, with concerns about tokenization innovation leading to pure speculation. A key warning signal is the widening gap between the market-cap-weighted and equal-weighted S&P 500 indices, suggesting underlying market fragility.

marsbitHá 45m

The Powell Era Concludes: Warsh Takes Over the Fed, What It Means for Global Finance and the Crypto Market?

marsbitHá 45m

Bidding Farewell to the 'Gray Gambling Game'! Polymarket Charges into the Compliance Track—How Will This Impact the Entire Crypto Industry?

From Gray to Regulated: How Polymarket’s Compliance Journey Reshapes Crypto The evolution of Polymarket, a decentralized prediction market platform, illustrates a critical trend in crypto: innovative, high-value sectors ultimately integrate into regulatory frameworks. Founded in 2020, Polymarket quickly gained traction by leveraging low-cost Layer 2 blockchain technology for event-based trading, notably during the 2024 US presidential election where its markets outperformed traditional polls. However, its "build first, comply later" approach led to a 2022 CFTC enforcement action, resulting in a $1.4 million fine and a ban from the US market. A pivotal shift occurred in 2025 under a new US administration. Polymarket strategically acquired CFTC-licensed derivatives exchange QCX for $112 million, securing a regulated pathway back into the US. This move coincided with a regulatory reversal, as the CFTC withdrew a prior proposal to ban political event contracts. The platform’s successful "regulatory acquisition" strategy, avoiding a lengthy independent licensing process, highlights a viable compliance path for crypto-native projects. Its journey from regulatory target to a CFTC-recognized entity—bolstered by a major data partnership and investment from Intercontinental Exchange (ICE)—signals the maturation of prediction markets from a "crypto novelty" into acknowledged financial infrastructure. The story underscores that genuine utility provides negotiating power with regulators and that embracing compliance does not necessarily mean sacrificing core technological advantages.

marsbitHá 46m

Bidding Farewell to the 'Gray Gambling Game'! Polymarket Charges into the Compliance Track—How Will This Impact the Entire Crypto Industry?

marsbitHá 46m

Here’s The 411 Behind The Famous $50 XRP Candle On Gemini In 2023

Amid ongoing discussions about XRP's price, crypto analyst CharuSan revisited the infamous "$50 XRP candle" that occurred on the Gemini exchange in 2023. This event, where XRP's price briefly spiked to $50, was widely speculated to be a glitch. However, CharuSan explained it was a real market event caused by catastrophic slippage. The relisting of XRP on Gemini left order books with very low liquidity. A market buy order worth approximately $37,000 consumed all available sell orders until it hit a single sell order placed at the $50 level, causing the dramatic price surge. CharuSan argues this incident mathematically demonstrates why large financial institutions cannot rely solely on on-demand liquidity, especially during high volume. To handle billion-dollar cross-border transfers without causing massive slippage and freezing the system, tier-1 banks must maintain their own deep, pre-funded, and dedicated XRP liquidity pools. The event underscores that managing large institutional volumes requires controlled, bank-held liquidity to prevent traders from losing control over market prices and transactions. At the time of the analysis, XRP was trading around $1.38.

bitcoinistHá 1h

Here’s The 411 Behind The Famous $50 XRP Candle On Gemini In 2023

bitcoinistHá 1h

How Donald Trump’s Order On Dollar Payment Rails Could Be A Game-Changer For Ripple’s XRP

President Trump signed an executive order directing federal regulators to review whether cryptocurrency and fintech firms can gain access to the US dollar payment infrastructure, including Federal Reserve accounts. This could be a major development for Ripple and XRP. Ripple has long positioned XRP as a tool for fast, low-cost cross-border payments, but its growth has been hindered by limited access to the Fed's payment systems, which are typically reserved for traditional banks. The order mandates regulators to identify and potentially remove barriers preventing crypto firms from partnering with banks and obtaining national bank charters. If the Fed grants direct access, Ripple could integrate its technology directly into the dollar payment rails, allowing XRP to serve as a bridge asset for real-time settlements and significantly increasing its utility and demand.

bitcoinistHá 3h