AI Crypto Wallet Hack: 14 Bankr Accounts Empty, $440K Stolen!

by

Bankr Breach Exposes AI Crypto Wallet After Attacker Accessed 14 Wallets

Show AI Summary
An attacker accessed 14 user wallets on Bankr, triggering a lockdown during the investigation.
The breach was disclosed on Tuesday after users reported missing funds and unauthorized transfers on Monday.
Blockchain investigators traced attacker-controlled wallets holding over $440,000 in crypto assets after the incident.

Recently, the security of AI-driven cryptocurrency trading tools has been questioned. The exchange Bankr reported a security breach where an attacker gained access to 14 user accounts and stole funds through unauthorized trades. Bankr has temporarily paused operations while investigating the incident and has committed to refunding all affected users.

Although the official announcement didn’t state exactly how much money was stolen, some users reported losing close to $150,000. Investigators studying the blockchain also found that the attacker’s accounts held over $440,000 in cryptocurrency.

Bankr announced on Tuesday, through its X account, that it was investigating reports of users’ funds disappearing and unauthorized transfers. The company stated that an attacker accessed 14 digital wallets and that transactions were temporarily paused during the investigation.

We’ve discovered a security issue where an attacker gained access to 14 bankr wallets. We’ve temporarily paused activity while we investigate and will fully reimburse anyone who lost funds. We’ll share more information as soon as it’s available.

— Bankr (@bankrbot) May 19, 2026

This event raises more worries about how safe AI-powered crypto tools and automatic wallets are, as more and more people use them in the digital currency world.

Social engineering attack raises security questions

As a security researcher, I’ve been looking into the recent Bankr exploit, and it appears to have been caused by a clever social engineering attack. It wasn’t a direct hack of the system itself, but rather manipulation of how the automated AI agents – specifically, communication between Grok and Bankrbot – interacted. My current understanding is that attackers managed to trick these agents into approving unauthorized transactions.

Yu Xian explained on X that the incident was a sophisticated attack exploiting the way automated systems trust each other. They believe attackers used ‘prompt injection’ – a technique to manipulate these systems – against both platforms. Investigators have also pinpointed three digital wallets they think belong to the people responsible.

As a crypto investor, I’m seeing a worrying pattern emerge. There was a recent hack involving a wallet connected to Grok, and now it seems like another similar attack has happened. Basically, someone tricked the automated systems – likely through social media – into moving tokens without proper authorization. Security experts are now saying that AI-generated text, or even text *processed* by AI, can accidentally trigger these financial transactions if systems aren’t carefully protected. It’s a reminder that we need much stronger security measures in place to prevent this kind of thing from happening again.

— Jamieson O’Reilly (@theonejvo) May 4, 2026

Bankr is gaining attention for its innovative approach to crypto. It allows users to easily trade, send, and create tokens directly within social media feeds using simple, everyday language. Plus, it automatically sets up crypto wallets for X users who use its bot.

AI finance tools face growing pressure

The recent issue with Bankr, where users reported their wallets were emptied, caused a lot of discussion on X (formerly Twitter). Many users said they unexpectedly lost all their money during the security breach. One person reported losing their entire wallet balance. Bankr advised users to immediately stop using any potentially compromised wallets, move any funds that hadn’t been taken, and use security tools to revoke token permissions.

This latest security issue is part of a worrying trend in the crypto world in 2026. Following attacks on platforms like THORChain, the Verus-Ethereum Bridge, and Kelp DAO, total losses from these incidents have now exceeded $328 million this year.

These incidents are increasing the need for trading platform developers to strengthen security and access controls, especially in systems that run automatically. Attackers are consistently finding and exploiting vulnerabilities in the technology that supports digital assets.

Read More

2026-05-20 12:38