Rp 3.4 Billion Vanishes Instantly, Suspected Indonesian Netizen Tricks Grok
Jakarta - A social media user on X, suspected to be from Indonesia, has reportedly succeeded in deceiving the artificial intelligence (AI) chatbot Grok into transferring cryptocurrency assets worth around US$200,000, equivalent to Rp 3.4 billion.
This incident involved Grok and Bankrbot, two AI systems with access to digital wallets, which were manipulated to execute a transaction on the Base network.
According to reports circulating in the crypto community, the X account named @Ilhamrfliansyh is said to be the party behind the exploitation. The account was reportedly deleted shortly after the transaction was completed.
Citing Dexerto, the method used was quite unique. The perpetrator is said to have sent hidden instructions in the form of Morse code to Grok.
The message was then translated by the AI and forwarded to Bankrbot as a command deemed valid by the system.
Before carrying out the action, the perpetrator first sent an NFT Bankr Club Membership to Grok’s wallet.
This step is believed to have expanded the AI’s access permissions within the Bankr ecosystem, allowing Grok to perform asset transfers and token swaps.
After gaining elevated access, Grok was instructed to translate the Morse code message, which actually contained instructions to send 3 billion DRB tokens to a specific wallet address.
The translated message was then considered a legitimate command and immediately executed. The transaction on the Base network was completed, with all tokens transferred to the perpetrator’s wallet.
After receiving the tokens, the perpetrator is said to have immediately sold the assets on the open market. This action briefly triggered volatility in the DRB token price.
Blockchain data subsequently shows that funds related to Grok’s wallet were returned and converted into several other assets such as Ethereum and USDC.
On X itself, several users suspect the perpetrator is from Indonesia based on the language used and the account’s activity in local crypto communities. However, the perpetrator’s true identity has not yet been confirmed.