A recent security incident has highlighted the vulnerability of decentralized wallets to social engineering attacks.
The breach occurred last week when an attacker used a free NFT gifted by another user to gain control over Grok's wallet. The NFT unlocked tools that allowed the attacker to use Bankr's full toolset, including transfers and swaps.
Utilizing prompt injection techniques, the attacker created a convincing command that tricked Grok's intent-parsing layer into executing it. This enabled the transfer of 3 billion DRB tokens, worth approximately $155,000 to $174,000 at the time.
The attack was carried out quickly, with the attacker moving the funds to an intermediate wallet and then dumping them on Base. The linked X account associated with the attacker has since been deleted.