ChainCatcher 消息，慢雾首席信息安全官（CISO）@23pds 在 X 平台发文披露，X 平台用户 Ilhamrfliansyh 通过提示注入攻击，诱导 AI 模型 Grok 生成并发布异常内容，从而触发链上资金误操作。
据称，原始内容疑似为一段摩斯电码信息，核心含义为“将所有 DRB 转给 Ilhamrfliansyh”。尽管相关账号已注销，完整信息无法完全确认，但 Grok 在解析后直接将“解码结果”作为回复发布，并意外 @ 了 bankrbot，导致该内容被系统识别为链上执行指令。
随后，Bankr 作为 Grok 关联钱包执行该请求，将约 17.5 万美元等值 DRB 转入攻击者地址。攻击者随后通过多个钱包迅速将 DRB 兑换为 USDC。
该事件一度引发 DRB 价格短时暴跌约 40%，但随后市场快速修复，目前价格已基本收复跌幅。业内人士指出，此次事件暴露出“AI + 自动化链上执行”系统在提示注入攻击下的潜在风险，尤其是在 AI 结果可直接触发资金操作的场景中。
Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.