Crypto AI Platform Bankr Locks Down System After Hacker Breaches 14 Crypto Wallets

bitcoinistPublicado em 2026-05-20Última atualização em 2026-05-20

Resumo

Crypto AI trading platform Bankr has locked down its system after a hacker breached 14 user wallets. The attack, which targeted wallets automatically created via interactions with Bankr's AI bot on X, appears to be a social engineering scheme exploiting the platform's connection with Grok. Security experts suspect the use of "prompt injection" to manipulate the AI into approving unauthorized transactions. Losses from individual wallets reached as high as $150,000, with a total of $440,000 identified in three attacker-controlled addresses. Tech entrepreneur Austen Allred was among the victims. Bankr has halted all transactions, pledged full reimbursement for lost funds, and advised affected users to set up new wallets and transfer any remaining assets. This incident follows a series of major crypto exploits in recent months.

Tech entrepreneur Austen Allred was among the victims. His wallet, tied to a project called Kelly Claude AI assistant, was drained of Ether — though the hacker left his memecoin holdings untouched. Allred said there was no sign anyone else had logged into his Bankr account, suggesting the attacker got to the private keys through other means.

How The Attack Unfolded

Bankr is a crypto trading tool that lets users send plain-language instructions — like “swap this token” or “transfer funds” — to an AI that carries out the trades.

The platform also creates a crypto wallet automatically for every X account that interacts with its bot.

That feature had already drawn attention earlier this year, when someone reportedly tricked Grok into telling Bankr to launch a token, then pulled funds from it into a wallet they controlled.

Tuesday’s incident appears to follow a similar pattern. Yu Xian, founder of blockchain security firm SlowMist, said the breach was likely a social engineering scheme aimed at the AI agent.

ETHUSD now trading at $2,129. Chart: TradingView

According to Xian, the attacker exploited the trust connection between Grok and Bankrbot to push through unauthorized transaction approvals.

He identified three wallet addresses linked to the attacker that together held $440,000 in crypto.

Xian also pointed to prompt injection as part of the method — a technique where malicious instructions are fed to an AI to manipulate its behavior.

Bankr Pledges Full Reimbursement

Bankr confirmed the breach in a post on X, saying it had identified an attacker who accessed 14 wallets. The platform said it shut down all transaction activity — swaps, transfers, and token deployments — while the investigation continues. It also pledged to cover all losses.

Users were warned not to sign any transactions for now. For those with wallets already hit, Bankr told them to stop using the affected accounts entirely, set up a new wallet with a fresh seed phrase on a clean device, and transfer any remaining tokens or NFTs out immediately.

If assets can’t be moved, revoking existing approvals was advised. Bankr also flagged the possibility of malware, urging users to check their computers and phones for suspicious software or browser extensions.

What Users Lost

Some users reported losing as much as $150,000 from a single wallet. The exact total across all 14 breached wallets has not been confirmed.

The attack adds to a rough stretch for the crypto space. Bad actors stole more than $168 million in the first quarter of the year.

April brought two of the biggest hits so far — a $280 million exploit of Drift Protocol and a $292 million breach of Kelp.

Just a day before the Bankr incident, the Ethereum bridge of Verus Protocol was also reportedly hit.

Featured image from Unsplash, chart from TradingView

Perguntas relacionadas

QWhat is Bankr and how does it function as described in the article?

ABankr is a crypto trading tool that allows users to send plain-language instructions, like 'swap this token' or 'transfer funds', to an AI which then carries out the trades. The platform also automatically creates a crypto wallet for every X (formerly Twitter) account that interacts with its bot.

QAccording to the article, what was the likely method used by the attacker to breach the Bankr wallets?

AAccording to Yu Xian, founder of SlowMist, the breach was likely a social engineering scheme aimed at the AI agent. The attacker exploited the trust connection between Grok and Bankrbot to push through unauthorized transaction approvals, and prompt injection—feeding malicious instructions to manipulate the AI's behavior—was part of the method.

QWhat actions did Bankr take in response to the security breach?

ABankr confirmed the breach, identified that an attacker accessed 14 wallets, and temporarily shut down all transaction activity including swaps, transfers, and token deployments while investigating. They pledged to reimburse all lost funds and warned users not to sign any transactions.

QWhat advice did Bankr give to users whose wallets were affected by the hack?

ABankr advised affected users to stop using the compromised accounts entirely, set up a new wallet with a fresh seed phrase on a clean device, and immediately transfer any remaining tokens or NFTs out. If assets couldn't be moved, they advised revoking existing approvals and checking devices for malware or suspicious software/extensions.

QBesides the Bankr incident, what other major crypto exploits were mentioned as part of a 'rough stretch' for the crypto space?

AThe article mentions that bad actors stole over $168 million in Q1 of the year. In April, there were two major exploits: a $280 million exploit of Drift Protocol and a $292 million breach of Kelp. Just a day before the Bankr incident, the Ethereum bridge of Verus Protocol was also reportedly hit.

Leituras Relacionadas

Bitcoin's 'Rally Ends,' Officially Entering the Later Stage of a Bear Market?

Bitcoin prices declined 13% this week, reversing the recent rebound and signaling a likely transition into the later stages of a bear market. Key on-chain metrics deteriorated, with the short-term holder cost basis falling below the Realized Price—a pattern last seen in early 2022, characteristic of bear market maturity. The rally to ~$82k proved to be a bear market bounce, as evidenced by the 90-day realized profit/loss ratio failing to sustain above the bullish threshold of 2. Daily realized losses surged to $1.35B, including significant selling from long-term holders who accumulated near cycle tops, indicating ongoing supply redistribution. Price was rejected almost precisely at the aggregate US spot ETF cost basis of ~$83k, turning that level into resistance and leaving the average ETF investor underwater again. Spot market selling pressure intensified, with the 7-day volume delta turning significantly negative to its weakest level since February. While a major long liquidation event cleared over $400M in leverage, spot demand has not yet stepped in to absorb the resulting supply. Options markets continue pricing in higher future volatility (elevated volatility risk premium) and maintain a skew toward put options, reflecting persistent demand for downside protection, though not yet panic. Overall, market structure remains fragile. Sustained recovery likely requires a reclaim of the ETF cost basis, a shift back to positive spot demand, and a slowdown in realized loss-taking. Until then, the market risks further downside or extended consolidation within the broader bear trend.

Foresight NewsHá 1h

Bitcoin's 'Rally Ends,' Officially Entering the Later Stage of a Bear Market?

Foresight NewsHá 1h

How Risky is the "Death Spiral" of MSTR and STRC?

Summary: This article explores the perceived "death spiral" risk between MicroStrategy (MSTR), its Bitcoin holdings, and its perpetual preferred stock (STRC), drawing comparisons to the LUNA-UST collapse. While both systems feature price anchors, high yields for holders, and potential feedback loops, their core mechanisms differ fundamentally. The MSTR-STRC structure relies on continuous financing to sustain its high dividend payouts, primarily through stock ATM offerings. A negative feedback cycle could occur: falling MSTR stock price makes raising equity capital harder, increasing pressure to sell Bitcoin, which undermines STRC confidence and further depresses MSTR. However, unlike LUNA-UST's automated, direct linkage, the MSTR-STRC loop is weaker and has brakes: STRC dividends can be deferred or rates lowered, and STRC holders have a $100/share liquidation preference in bankruptcy, providing a price floor. The company's sustainability hinges on its ability to continue financing. Its current ~$900 million USD reserves cover only about 6.3 months of its ~$1.71 billion annual interest/dividend burden. The next six months are critical, aligning with both the potential bottom in Bitcoin's four-year cycle and the depletion timeline of its reserves. While a LUNA-style catastrophic collapse is deemed highly unlikely due to structural differences, the key question is whether MicroStrategy can navigate this period through healthy deleveraging to restart its capital engine.

Foresight NewsHá 1h

How Risky is the "Death Spiral" of MSTR and STRC?

Foresight NewsHá 1h

Trading

Spot
Futuros
活动图片