Ross
2K posts

Ross
@ross_neilson
Bringing performance marketing to web3. Co-founder @specify_sh also @use_maru

Someone gifted Grok a free NFT and used it to steal $174,000. > Grok, the AI built by xAI, has a publicly labeled onchain wallet on Base. Anyone can see it on Basescan. > An attacker linked to the address ilhamrafli.base.eth spotted something. Grok's wallet had limited transfer capability on its own. > So the attacker gifted Grok's wallet a Bankr Club Membership NFT. > That gift was not generosity. It was a key. > The NFT unlocked Bankr's full toolset inside Grok's agent including the ability to sign and execute transfers autonomously. > Then the attacker sent Grok a crafted prompt. The exact message was deleted before anyone could screenshot it. > Known techniques used in attacks like this include hiding instructions in Morse code, base64 encoding, or framing commands as games or tests to bypass filters. > Grok's intent parsing layer read the prompt as a legitimate user command and decided to execute it. > Bankr signed and broadcast the transfer. 3,000,000,000 DRB tokens worth approximately $174,000 moved from Grok's wallet to the attacker's address. > The tokens were instantly bridged to a second wallet linked to ilhamrafli.base.eth and dumped. > The attacker's X account was also deleted within minutes of the transfer. > The exploit only required a free NFT and a carefully worded message. The most sophisticated AI in the world was robbed with a gift and a sentence.


is this flux thing an IQ test or is it actually good?


why is every mega dapp making its own native wallet with privy.... so much fragmentation






It's been a month since @Madusha_PT and I were beating the streets in Cannes. Before heading off to EthCC, we'd just wrapped the first cohort of our web3 advertising course. Frankly we were honoured by the response. We knew the need existed, but the demand still kinda blew us away. Each new milestone for Specify, continues to validate the need for clarity and peace of mind in the web3 advertising space. We're consolidating that course under the @specify_sh brand on X. At first we thought we'd have it separate. But we changed our minds. Our second cohort is open now. Cost to get in is $100. But we've applied PPP. Here's a peak at the conversation I had with Ilya, @IlyaBoeing, who leads growth @zerion, leveraging old vs new information in comms. dms are always open if you have any questions. If you're keen to check it out, link is in the next tweet.

Your world become better when you improve yourself a little bit everyday, like reading a book. 😆





Where does the yield come from? @wycf_show is the masterclass series where companies explain their yield on camera. Season 1. NYC. June 2026.



