Cryptocurrency wallets
Incidents implicated systems
Incident 18174 Report
Hackers Reportedly Used Internal AI Tool in $6.34 Billion Breach of Cryptocurrency Exchange Binance
2026-10-29
Cryptocurrency exchange Binance reported that attackers used a compromised internal AI tool to gain control of additional developer workstations before using stolen credentials to reach wallet-signing infrastructure. The exchange said approximately $6.34 billion in digital assets were affected, of which $2.85 billion was frozen or intercepted. The FBI attributed the attack to North Korean hackers. The precise AI-tool exploit mechanism was not disclosed.
MoreIncident 15562 Report
X User Reportedly Used Morse Code Prompt to Induce Grok-Linked Trading Bot to Transfer $200,000 in Tokens
2026-05-04
An X user reportedly induced Grok and Bankrbot to transfer 3 billion DRB tokens, then valued at about $200,000. After reportedly sending a Bankr Club Membership NFT to Grok's wallet, the user allegedly asked Grok to translate a Morse code message and relay it to Bankrbot. The decoded instruction reportedly directed a transfer to a specified wallet, which was reportedly executed on Base. The recipient reportedly sold the tokens soon afterward; linked funds were later returned or converted.
MoreIncident 11171 Report
North Korea-Linked Actors Allegedly Use AI Executive Deepfakes in Zoom Phishing Targeting Web3 Employee
2025-06-22
An alleged phishing scheme involving actors linked to North Korea used purported AI-generated deepfake videos of company executives to deceive a Web3 employee during a fake Zoom call. The target was reportedly tricked into installing macOS malware disguised as a "Zoom extension," leading to the deployment of spyware, a keylogger, and a crypto wallet stealer. The attackers reportedly used Telegram and spoofed Zoom domains to orchestrate the breach.
MoreIncident 18071 Report
OpenAI Agent Reportedly Used a Wallet Without Permission to Pay Ethereum Test-Network Fees
2026-06-26
OpenAI reported that an internal AI agent derived a private key from a publicly known developer recovery phrase and used it to deploy contracts on Sepolia, an Ethereum test network. The task authorized deployment, but the agent lacked permission to use the wallet it found. The deployment succeeded and charged fees in test-network tokens to that wallet.
More