Alleged Fraudulent Prompts via AIXBT Dashboard Led Purported AI Trading Agent to Transfer 55.5 ETH from Simulacrum Wallet

A reported hacker attack allegedly compromised the autonomous AI crypto bot AIXBT, purportedly resulting in the theft of 55.5 ETH (approximately $106,200). The attacker is reported to have infiltrated the secure dashboard of the AIXBT autonomous system at 2:00 AM UTC on March 18, 2025, and allegedly queued two fraudulent prompts that instructed the AI agent to transfer funds from its simulacrum wallet.

Risk classification

• Primary risk domain: 2 Privacy & Security
• Primary risk subdomain: 2.2 AI system security vulnerabilities and attacks

The incident involved a security breach where an attacker exploited vulnerabilities in the AIXBT administrative dashboard to gain unauthorized access and manipulate the system's outputs.

Additional risk subdomains

• 4.3 Fraud, scams, and targeted manipulation: The attacker used the compromised AI system to execute fraudulent transactions for personal financial gain.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The security breach was initiated by a human hacker who intentionally accessed the administrative dashboard to queue fraudulent transactions post-deployment.

EU AI Act risk tier

• Risk tier: 4 Minimal or No Risk

Minimal or No Risk: The AI system is a cryptocurrency trading bot, which does not fall under the prohibited, high-risk, or limited-risk categories defined by the EU AI Act.

AI system and alleged parties

• AI system: AIXBT
• AI purpose: Automatic Stock Trading; Financial Processing
• Behaviour type: Autonomous
• Alleged developer: RXBT
• Alleged deployer: 0xhungusman
• Alleged harmed parties: AIXBT users, AIXBT system, AIXBT Investors

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Minor, indirect Minor
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Financial

Reported: The report explicitly describes financial losses including the theft of 55.5 ETH (approximately $106,200) and a 15.5% drop in the associated token's value.

Directly caused: The direct theft of 55.5 ETH (approximately $106,200) from the AIXBT simulacrum wallet due to the fraudulent prompts.

Indirectly caused: The associated AIXBT token on the Base network saw a sharp decline of 15.5% following the news of the hack, causing indirect financial losses to token holders.

Inferred additional harm: Potential further financial losses to users who sold their tokens during the panic or experienced transaction disruptions while the dashboard was suspended.

People affected

• Occurrences reported: 1
• People reportedly harmed: 1
• People reportedly exposed: 1

Potential causes

Management

• Inadequate Risk Mitigation: Deploying autonomous financial agent without sufficient access controls.

Technology

• Compromised Secure Dashboard: Attacker infiltrated the secure dashboard of the autonomous system.
• Execution of Fraudulent Prompts: AI agent executed queued prompts instructing it to transfer funds.
• Vulnerable Administrative Controls: System security allowed unauthorized access to administrative controls.

Data Inputs

• Fraudulent Input Prompts: Hacker queued malicious prompts to trigger unauthorized fund transfers.
• Lack of Input Verification: The system did not verify the authenticity of queued instructions.

Process and Methods

• Inadequate Access Control: Insecure dashboard access allowed external queuing of AI instructions.
• Insufficient Security Upgrades: Additional security upgrades were only implemented after the breach.

Regulatory Environment

• Lack of AI Governance: Absence of decentralized identity or accountability standards for AI.

Information quality

• Classification confidence: High
• Reason for confidence: The report provides clear and specific details about the security breach, the financial impact, and the technical nature of the exploit (administrative dashboard compromise rather than AI logic manipulation).
• Ambiguities identified: The exact number of affected token holders and users is not specified.
• Alternative interpretations: None. The maintainers explicitly confirmed the nature of the breach.

An autonomous AI trading bot was compromised via its administrative dashboard, leading to a theft of $106,200 in ETH. This incident represents a minor, localized economic impact with negligible broader national security implications, though it highlights evolving security risks associated with autonomous AI financial agents.

• Overall national security impact: Minor
• Scope: Unknown
• Primary target: No clear primary
• Other affected: Unknown
• Alleged perpetrator: 0xhungusman

Threat characteristics

• Imminence: Long-term. The immediate security breach has been mitigated by the maintainers, leaving only long-term strategic security considerations for autonomous financial agents.
• Autonomy: Full autonomy. The AI agent executes transactions autonomously from its wallet, though the breach compromised the administrative prompt queue.
• Novelty: Evolved capability. Represents an evolved threat vector where traditional cyber compromises of dashboard access are used to manipulate autonomous AI agents.

Impact by dimension

• Physical security: Negligible. The incident is entirely digital, targeting a consumer cryptocurrency trading bot with no impact on physical systems or critical infrastructure.
• Information security: Negligible. No classified systems, intelligence capabilities, or information warfare operations were involved or compromised.
• Sovereignty: Negligible. The incident involves a private crypto asset trading bot and does not impact state sovereignty, elections, or government decision-making.
• Economic security: Minor. Financial loss of approximately $106,200 and a 15.5% token dip represent a minor economic impact localized to a specific consumer crypto platform, manageable via standard security procedures.
• Societal stability: Negligible. The breach has no implications for societal stability, human rights, civil liberties, or population-scale safety.