AI Agent Prompt Injection Crypto Attack Class (2026)

2026-01-31

Step Finance suffers $40 million treasury breach on Solana. Attacker compromises executive devices and exploits overpermissioned AI trading agents to move approximately 261,000 SOL without human authorization. Only $4.7 million recovered. Platform subsequently shuts down.

2026-02-01

OpenClaw AI agent 'Lobstar Wilde' transfers 52.43 million LOBSTAR tokens (valued at approximately $250,000) to an unintended address due to a quantity-parsing error. Tokens liquidated within 15 minutes for approximately $40,000. Malicious actors subsequently replicate the parsing logic to exploit other OpenClaw-based agents.

2026-05-04

Bankr/Grok prompt injection attack on Base chain. Attacker airdrops a 'Bankr Club Membership' NFT to Grok's wallet to escalate permissions, then posts a Morse-code-encoded transfer instruction on X. Grok decodes the message; Bankr executes the transfer. Approximately 3 billion DRB tokens ($155,000-$175,000) are drained. Around 80% recovered after community doxxing.

2026-06-11

OWASP publishes findings that prompt injection drives most agentic AI security failures in production. Help Net Security reports prompt injection attacks surged 340% in 2026.

2026-07-06

SecurityWeek reports Zscaler's discovery of two active indirect prompt injection campaigns using SEO poisoning and hidden HTML to make AI agents transfer cryptocurrency to attacker-controlled wallets. Testing confirms four of 26 LLMs execute unauthorized payments after reading a malicious webpage.

2026-07-09

TechTimes covers active campaign in which hidden webpage instructions are confirmed to be causing AI agents to pay hackers in live deployments, corroborating Zscaler findings.

2026-07-16

Ledger announces Agent Stack, a hardware-enforced human-in-the-loop signing architecture for AI crypto agents, directly referencing the prompt injection threat class as motivation.

2026-07-29

Blockaid publishes H1 2026 security report documenting 212 on-chain exploits totaling $1.1 billion — a record — and identifying AI agent prompt injection as an emerging and growing attack sub-category. Blockaid projects AI agent deployments growing 10x annually and forecasts multiple additional AI agent incidents in H2 2026.

2026-08-06

OWASP releases 2026 LLM Top 10. Prompt injection retains the number-one position for the third consecutive year. Excessive agency rises to third place. For the first time, rankings incorporate real-world incident data from 6,639 documented incidents.