closedclosed 1 Apr 2025Patch now4 Confirmed real-world lossAI
AIXBT Crypto Bot Exploited via Fraudulent Prompts to Transfer ETH
AIXBT
Attackers infiltrated the dashboard of the autonomous AI crypto bot AIXBT and queued fraudulent prompts. This tricked the AI agent into transferring 55.5 ETH from its wallet.
- fix status
- Fix status unknown
- first report
- 18 Mar 2025
- last update
- 18 Mar 2025
Timeline · 1
Sources · 1
Research and catalogues
- 2025-03-18Alleged Fraudulent Prompts via AIXBT Dashboard Led Purported AI Trading Agent to Transfer 55.5 ETH from Simulacrum WalletAI Incident Database · incidentdatabase.ai/cite/1003
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Patch now
- AI role
- Attack on AI
- categories
- Prompt injectionAgent hijack
- severity
- 4 · Confirmed real-world loss
- fix status
- Fix status unknown
- targets
- Enterprise deployment
- owasp llm top 10
- LLM01:2025 Prompt InjectionLLM06:2025 Excessive Agency
- dates
- happened 18 Mar 2025 · first reported 18 Mar 2025
- origin
- AI Incident DatabaseDerived from the AI Incident Database (CC BY-SA 4.0).
- record
- confidence 0.95 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# AIXBT Crypto Bot Exploited via Fraudulent Prompts to Transfer ETH https://gcdradar.vercel.app/incidents/aixbt-crypto-bot-exploited-via-fraudulent-prompts-to-transfe · AIR-2025-0164 · closed 2025-04-01 - Lane: Patch now - Severity: 4 (Confirmed real-world loss) - Fix status: Fix status unknown - First reported: 2025-03-18 - AI role: Attack on AI - Products: AIXBT ## Summary Attackers infiltrated the dashboard of the autonomous AI crypto bot AIXBT and queued fraudulent prompts. This tricked the AI agent into transferring 55.5 ETH from its wallet. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2025-03-18: Alleged Fraudulent Prompts via AIXBT Dashboard Led Purported AI Trading Agent to Transfer 55.5 ETH from Simulacrum Wallet (https://incidentdatabase.ai/cite/1003) ## Sources - 2025-03-18 AI Incident Database: Alleged Fraudulent Prompts via AIXBT Dashboard Led Purported AI Trading Agent to Transfer 55.5 ETH from Simulacrum Wallet https://incidentdatabase.ai/cite/1003 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closedMicrosoft 365 Copilot Microsoft 365 Copilot Financial Transaction Hijacking via RAG
Research · since 8 Aug 2024
AI - liveMobileProbe: Adaptive Security Evaluation of Mobile Agents via Trajectory-Aware Injection
Research · since 13 Nov 2026
AI - livePrompt Injection, Esq.: pwning AI agent guardrails with lawyerspeak
Research · since 11 Nov 2026
AI - liveLLM agents Defending LLM Agents Against Parameter Poisoning
Research · since 4 Nov 2026
AI - liveLLM search agents Adversarial Self-Evolving Attacks on Search Agents
Research · since 4 Nov 2026
AI - liveLLM agents Weaponized Safety Warnings for Controlling AI Agents
Research · since 4 Nov 2026
AI