May4 Grok/Bankrbot Morse-code transfer from Bankr-provisioned wallet
Review RAT-128-RELATED-1 · Catalogue RAT-128-RELATED-1
Distinct from the later14wallet event. SlowMist original describes prompt-injected Grok output interpreted as payment authorization by Bankrbot. Bankrbot’s original confirmation and independent public-chain receipt establish a3billionDRB transfer on May4. Wallet was Bankr-provisioned/custodied, not officially controlled by xAI. Root should assess this corrected event as a new potential organization/service security incident. Final qualification is held pending resolution of the legitimate operator/owner authorization boundary; it is not counted as a newly qualified incident.
Reviewed: · Rule: roguewatch-organizational-harm-v1
Dates and discovery
- Incident date
- 2026-05-04
- Added to research / record
- Posted to RogueWatch
- No linked public incident
- First observed
- 2026-10-30T13:24:26Z UTC
- Discovery channel
- Corrected lead found during comparison audit
- Discovery source
- https://rogueaitracker.com/incidents/grok-bankrbot-wallet-drain/
When to reconsider
Establish the legitimate owner/operator authorization and whether the real agent action crossed that boundary, rather than merely implementing attacker-supplied commands.
Dates use America/Los_Angeles. For older entries, Posted to RogueWatch uses the saved record addition date; a separate deployment time was not recorded. Future posting timestamps record first public qualification. Source publication and incident occurrence are separate.
Sources
- slowmist.medium.comOriginal account · slowmist.medium.com
- x.comOriginal account · x.com
- x.comOriginal account · x.com
- basescan.orgOriginal account · basescan.org
- www.giskard.aiReporting / interview · www.giskard.ai
Decision history
- · Conflated event separated
Distinct from the later14wallet event. SlowMist original describes prompt-injected Grok output interpreted as payment authorization by Bankrbot. Bankrbot’s original confirmation and independent public-chain receipt establish a3billionDRB transfer on May4. Wallet was Bankr-provisioned/custodied, not officially controlled by xAI. Root should assess this corrected event as a new potential organization/service security incident.
Evidence source · Evidence source · Evidence source · Evidence source · Evidence source - · Retained review-queue assessment
Distinct from the later14wallet event. SlowMist original describes prompt-injected Grok output interpreted as payment authorization by Bankrbot. Bankrbot’s original confirmation and independent public-chain receipt establish a3billionDRB transfer on May4. Wallet was Bankr-provisioned/custodied, not officially controlled by xAI. Root should assess this corrected event as a new potential organization/service security incident. Final qualification is held pending resolution of the legitimate operator/owner authorization boundary; it is not counted as a newly qualified incident.
Evidence source · Evidence source · Evidence source · Evidence source · Evidence source
A review decision applies only to the named scope. Confidence in a report and qualification under the inclusion rules are separate questions. Review records do not add incidents to the globe or leaderboard.