This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
The autonomous AI trading bot AIXBT was compromised when an attacker gained access to its administrative dashboard. The attacker used this access to issue fraudulent prompts, causing the AI agent to transfer 55.5 ETH to an external wallet. Maintainers confirmed the breach targeted administrative controls rather than the AI's internal decision-making processes, and they have since implemented security upgrades.
A reported hacker attack allegedly compromised the autonomous AI crypto bot AIXBT, purportedly resulting in the theft of 55.5 ETH (approximately $106,200). The attacker is reported to have infiltrated the secure dashboard of the AIXBT autonomous system at 2:00 AM UTC on March 18, 2025, and allegedly queued two fraudulent prompts that instructed the AI agent to transfer funds from its simulacrum wallet.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Vulnerabilities that can be exploited in AI systems, software development toolchains, and hardware, resulting in unauthorized access, data and privacy breaches, or system manipulation causing unsafe outputs or behavior.
Also classified as
The attacker used the compromised AI system to execute fraudulent transactions for personal financial gain.
The incident involved a security breach where an attacker exploited vulnerabilities in the AIXBT administrative dashboard to gain unauthorized access and manipulate the system's outputs.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The security breach was initiated by a human hacker who intentionally accessed the administrative dashboard to queue fraudulent transactions post-deployment.
An autonomous AI trading bot was compromised via its administrative dashboard, leading to a theft of $106,200 in ETH. This incident represents a minor, localized economic impact with negligible broader national security implications, though it highlights evolving security risks associated with autonomous AI financial agents.
The report describes AIXBT as an 'autonomous AI crypto bot' and an 'AI agent' that executes transactions independently from its wallet based on queued prompts.
Minimal or No Risk: The AI system is a cryptocurrency trading bot, which does not fall under the prohibited, high-risk, or limited-risk categories defined by the EU AI Act.
The AI system is an autonomous trading bot designed to execute cryptocurrency transactions and manage a trading wallet.
The report provides clear and specific details about the security breach, the financial impact, and the technical nature of the exploit (administrative dashboard compromise rather than AI logic manipulation).
None. The maintainers explicitly confirmed the nature of the breach.
Technology
Compromised Secure Dashboard
Attacker infiltrated the secure dashboard of the autonomous system.
Execution of Fraudulent Prompts
AI agent executed queued prompts instructing it to transfer funds.
Vulnerable Administrative Controls
System security allowed unauthorized access to administrative controls.
Data Inputs
Fraudulent Input Prompts
Hacker queued malicious prompts to trigger unauthorized fund transfers.
Lack of Input Verification
The system did not verify the authenticity of queued instructions.
Process and Methods
Inadequate Access Control
Insecure dashboard access allowed external queuing of AI instructions.
Insufficient Security Upgrades
Additional security upgrades were only implemented after the breach.
Management
Inadequate Risk Mitigation
Deploying autonomous financial agent without sufficient access controls.
Regulatory Environment
Lack of AI Governance
Absence of decentralized identity or accountability standards for AI.
AI system involved
Identified by automated extraction; can differ from the alleged developers above.
