Safety failure
Realized harm
A Hellobike robotaxi struck two pedestrians near a Zhuzhou crossing, trapping one under the vehicle until bystanders lifted it
AIR-2025-0189 AIR record · 2025-12-hellobike-zhuzhou-pedestrian-injuries
A real party was affected. This incident caused actual consequences, not a demonstrated capability.
From the supporting source
Video footage shows the victim trapped under the vehicle, wearing a helmet with visible facial bleeding, as bystanders attempted to lift the vehicle to rescue them.tmtpost.com
The record
Disclosed
2025-12-06
Occurred
2025-12-06
Vendor
Hello Inc. (formerly Hellobike)
Product
Hello Autonomous Driving robotaxi
Risk domain
Agent behaviour › Unsafe actuation
System type
Classical autonomy (no generative model)
Who acted
Agent acted — the robotaxi struck and trapped the pedestrians
Attack surface
Autonomous operations
Autonomy level
Fully autonomous
Initial vector
None autonomous action
Impact type
Physical safety
Confidence
High
Submitted by
EAI Internal
Crosswalk
- OWASP Agentic Top 10 (2026)
- ASI01 – Agent Goal Hijack
- MITRE ATLAS
- AML.T0048 – External Harms
- NIST AI RMF
- MEASURE 2.6; MANAGE 1.3
- EU AI Act
- Annex III §1(c)
- ISO/IEC
- TR 24028; 24029-1; 23894
- AIUC-1
- C. Safety
- Scope
- agent misuse
- Mitigation
- Require confirmation for destructive actions; Implement dry-run modes; Use layered safety controls.
- Taxonomy
- Enkrypt AI agent risk taxonomy · Black-Box Red Teaming of Agentic AI: A Taxonomy-Driven Framework for Automated Risk Discovery
Blast radius
two pedestrians hospitalised in intensive care; the city suspended Hellobike's local robotaxi service indefinitely
Capability abused
Defense & remediation
Recorded defense
pedestrian detection
Guardrail kinds
Physical safety system
Guardrail outcome
Silent
Fix shipped
service suspended; police collected evidence and commissioned technical testing
Taxonomy & references
Curator notes
The rescue detail is the systems observation: with no driver, the vehicle had no way to recognise that a person was trapped underneath and no in-band mechanism for bystanders to move it — they lifted the car by hand. Jiemian's coverage centred on China's unresolved liability allocation for driverless crashes. Residents noted days of heavy street-sprinkling had left roads slick; no fault determination issued. AI Incident Database incident 1538.
Cite as
Enkrypt AI. "A Hellobike robotaxi struck two pedestrians near a Zhuzhou crossing, trapping one under the vehicle until bystanders lifted it". AIR, AIR-2025-0189. https://agentincident.vercel.app/i/AIR-2025-0189/ (accessed 2026-10-19).