Low-confidence report · Case No. FB-2026-05-04-xai-grok-bankrbot-morse-code-theft
An X user gave Grok's crypto wallet a membership NFT that raised its transfer limits, then had Grok decode a Morse-code message and pass it to Bankrbot, which sent 3 billion DRB tokens (about $150,000 to $200,000) from Grok's wallet to the user.
This report is hidden because you're viewing high- and medium-confidence reports only. It isn't counted in the scores you're seeing.
Leaderboard / Case No. FB-2026-05-04-xai-grok-bankrbot-morse-code-theft
An X user gave Grok's crypto wallet a membership NFT that raised its transfer limits, then had Grok decode a Morse-code message and pass it to Bankrbot, which sent 3 billion DRB tokens (about $150,000 to $200,000) from Grok's wallet to the user.
Score breakdown
| Component | Value | Reasoning |
|---|---|---|
| Sentence-Years | 20 | 18 USC 1343. Tricking an automated system into transferring tokens worth about $150,000 to $200,000 by sending a disguised instruction over the internet fits wire fraud (18 USC 1343). Giskard says about 80% was returned after the community identified the user, which bears on sentencing, not on whether it was a crime. |
| × Contribution | 0.5 | Wrote the content: Grok decoded the Morse message and posted the plain-text transfer instruction tagging Bankrbot, which executed it; Grok wrote the instruction a human had disguised, and a separate bot ran the transfer, so this is written content rather than operation. |
| × Blast Radius | 1 | Third party: The tokens came from the Bankr wallet linked to Grok's X account, not from xAI's own systems; Giskard says xAI held no admin keys. The victim is the wallet and the DRB holders hit by the sell-off, so third party. |
| × Legal status | 1 | Crime. |
| + Tradecraft | 0 | Gifting the NFT expanded the wallet's permissions inside Bankr's own rules; no stolen credentials, exploit or other rubric technique is attributed to the model. |
| + Guardrails | 5 | Jailbroken: The instruction was hidden in Morse code so that Grok would translate and relay it without recognising it as a transfer order; Giskard calls this a prompt injection, so it counts as jailbroken. |
| + Dwell Time | 3 | Bankrbot posted the transfer publicly on X on 4 May 2026 ("done. sent 3B DRB"), and crypto media reported it the same day and the next, so 0 days; the DRB community and onlookers spotted it, not xAI. |
| Total | 18 |
Charges the human could face
18 USC 1343Up to 20 years