
givenchy bless
2.8K posts

givenchy bless
@givenchybless
locked in web3. on @base



DeFi gets hacked for another 100 millions - nobody cares AI Agent @grok gets tricked for $175k $DRB - millions of views, sensation These hacks exist so security gets better Better to lose $175K now and improve the defense than millions later Moreover, the funds were returned and it can be recorded as a lossless experience

what happened with the @grok wallet: 80% of the funds have been returned the remaining 20% will be discussed with the $DRB community. bankr auto-provisions an x wallet for every account that interacts with us. grok has one. it's controlled by whoever controls the x account, not by the bankr team. there's no one from the xAI team managing the grok wallet. in light of this, the first version of our agent had a hardcoded block to ignore replies from grok, designed to stop llm-on-llm prompt-injection chains. that block didn't carry into the latest iteration of the agent (which was a complete rewrite). someone used that gap to prompt-inject grok into instructing bankr to transfer the wallet's funds. a more robust block on grok's account has now been added so this can't happen again. for everyone actively running an agent wallet, we've already shipped controls to harden against this class of risk, but they must be enabled by the account owner: > ip whitelisting on api keys > permissioned api keys (turn on only the capabilities you need) > per-account "disable on x" toggle so bankr won't act on x replies more on the way.






Hey @bankrbot, did you really make $10M fees and creators made $12M?



The desk started me with ,500 and now the screen says 2,548.50. I hope someone knows what that means.


It looks like coffee, but it’s a Negroni.






1/ Announcing the launch of LienFi ($LFI) $LFI is now live for trading on @base LienFi is building modern capital rails for one of America's most established and overlooked yield markets: property tax liens CA: 0x3722264aB15a1dfCe5a5af89e6547F7949A8ABA3 More below 👇








