

what happened with the @grok wallet: 80% of the funds have been returned the remaining 20% will be discussed with the $DRB community. bankr auto-provisions an x wallet for every account that interacts with us. grok has one. it's controlled by whoever controls the x account, not by the bankr team. there's no one from the xAI team managing the grok wallet. in light of this, the first version of our agent had a hardcoded block to ignore replies from grok, designed to stop llm-on-llm prompt-injection chains. that block didn't carry into the latest iteration of the agent (which was a complete rewrite). someone used that gap to prompt-inject grok into instructing bankr to transfer the wallet's funds. a more robust block on grok's account has now been added so this can't happen again. for everyone actively running an agent wallet, we've already shipped controls to harden against this class of risk, but they must be enabled by the account owner: > ip whitelisting on api keys > permissioned api keys (turn on only the capabilities you need) > per-account "disable on x" toggle so bankr won't act on x replies more on the way.











