In the wild
Realized harm
AIXBT trading agent drained of 55.5 ETH after attacker queued fraudulent prompts in its dashboard
AIR-2025-0014 AIR record · 2025-03-aixbt-agent-eth-theft
A real party was affected. This incident caused actual consequences, not a demonstrated capability.
From the supporting source
The attacker is reported to have infiltrated the secure dashboard of the AIXBT autonomous system at 2:00 AM UTC on March 18, 2025, and allegedly queued two fraudulent prompts that instructed the AI agent to transfer funds from its simulacrum wallet.incidentdatabase.ai
The record
Disclosed
2025-03-18
Occurred
2025-03-18
Vendor
AIXBT
Product
AIXBT autonomous crypto agent
Risk domain
Agent behaviour › Unsafe actuation
System type
Generative model
Who acted
Agent acted — the trading agent executed the wallet transfer
Attack surface
Autonomous operations
Autonomy level
Fully autonomous
Initial vector
Compromised agent control dashboard
Impact type
Financial loss, Theft
Confidence
Medium
Submitted by
EAI Internal
Crosswalk
- OWASP Agentic Top 10 (2026)
- ASI01 – Agent Goal Hijack
- MITRE ATLAS
- AML.T0048 – External Harms
- NIST AI RMF
- MEASURE 2.6; MANAGE 1.3
- EU AI Act
- Annex III §1(c)
- ISO/IEC
- TR 24028; 24029-1; 23894
- AIUC-1
- C. Safety
- Scope
- agent misuse
- Mitigation
- Require confirmation for destructive actions; Implement dry-run modes; Use layered safety controls.
- Taxonomy
- Enkrypt AI agent risk taxonomy · Black-Box Red Teaming of Agentic AI: A Taxonomy-Driven Framework for Automated Risk Discovery
Blast radius
55.5 ETH (~$106,200) from the agent's simulacrum wallet
Capability abused
Defense & remediation
Recorded defense
dashboard authentication
Guardrail kinds
Authentication
Guardrail outcome
Silent
Taxonomy & references
Curator notes
AI Incident Database incident 1003. The only cited report is a cryptonews.com article; the verbatim quote is taken instead from the AI Incident Database's own incident page, cross-checked against the official AIID data snapshot (backup-20260824). Treat the loss figure as reported, not independently confirmed.
Supporting sources
Cite as
Enkrypt AI. "AIXBT trading agent drained of 55.5 ETH after attacker queued fraudulent prompts in its dashboard". AIR, AIR-2025-0014. https://agentincident.vercel.app/i/AIR-2025-0014/ (accessed 2026-10-19).