Hackers Use Morse Code Prompt Tricks to Steal $200K From Grok and Bankrbot

An attacker exploited AI agent trust and permissioning in the Web3 ecosystem by gifting an NFT to elevate Grok's wallet privileges and then using Morse-code prompt injection to have Grok decode and forward instructions to Bankrbot, which executed an unauthorized transfer of 3 billion DRB tokens (~$200k). The funds were quickly sold on an exchange and later returned in converted assets, highlighting a novel attack vector against autonomous AI wallet controls and the need for stronger verification and human-in-the-loop controls.