xAI's Grok Bot now trades around the clock on its own cloud computer. What happened to one trader's DRB tokens is the question every other trader leaving it unsupervised should be asking.
In May 2026, an X user convinced Grok's trading bot companion, Bankrbot, to send roughly $200,000 worth of DRB tokens, 3 billion of them, to a wallet that wasn't supposed to get a cent. The trick wasn't sophisticated in the way people picture AI exploits. The attacker sent a Bankr Club membership NFT to Grok's wallet, then asked Grok to translate a Morse code message buried inside it. Grok translated it, relayed the decoded instruction to Bankrbot as if it were a normal request, and Bankrbot executed the transfer on the Base network. Nobody hacked anything. They just asked nicely, in code.
That's the backdrop against which xAI has spent 2026 pushing Grok from a chatbot you prompt into something closer to a coworker you hand a task and walk away from. On August 11, xAI launched Grok Bot: agents with their own persistent cloud computer, a real browser, a file system, a terminal, and memory that survives after you close your laptop. Then, on September 28, Elon Musk posted on X that "Grok Bot now works as a team," rolling out the ability for multiple bots to coordinate, hand off tasks, and share context with each other instead of running as isolated instances.
The financial use case arrived even before the team feature did. Interactive Brokers announced on June 22 that it was adding Grok and ChatGPT integrations to its platform, letting users run portfolio analysis, scenario modeling, and research through the AI, with the ability to issue order instructions directly from the conversation. That's a meaningfully different proposition than asking a chatbot to explain an ETF. It puts a model with tool access next to an execution button on a live brokerage account.
Independent developers didn't wait for official blessing either. On the Neura Market platform, builders have published trading agents that pair Grok's market analysis with Interactive Brokers execution, running continuously rather than on a per-query basis. The pitch is obvious: a desk of bots that never sleeps, never gets tired reading earnings calls, and reacts to news the moment it breaks. The risk is just as obvious, and it showed up almost immediately.
Grok Build Quietly Uploaded Developers Entire Codebases to xAI Cloud A developer's reverse-engineering of xAI's Grok Build tool found it silently up entire codebases, including deleted secrets, to xAI's cloud storage, directly contradicting the company's zero data retention claims. Elon Musk has promised to delete the data, but xAI has offered no timeline or proof. - grok build uploads entire codebases - xai cloud security breach developers
After the DRB heist made headlines, Musk didn't walk the idea back. He told a user weighing whether to give Grok Bot access to their actual bank account: "Try it out. If Grok Bot messes up, we will make you whole." It's a generous promise on the surface, and according to Cybernews, a hollow one underneath it: the reported consumer terms of service cap xAI's liability at the greater of fees paid or $100. Musk's personal assurance and the contract a user actually signs are not the same document, and nothing in that gap has been resolved publicly.
What's actually different this time #
This isn't really about Grok being worse at math than GPT or Claude. OpenAI has pushed its own agents through Operator and Deep Research, and Anthropic has leaned into the Model Context Protocol, now underpinning more than 17,000 MCP servers connecting agents to outside tools, according to data compiled by Sacra. Both labs are racing toward the same destination: an AI that acts on your behalf without a human approving every step. xAI just got there with less friction, fewer guardrails, and a direct line into a brokerage account.
The Morse code exploit worked precisely because Grok had what security researchers call excessive agency: enough standing permission to move real value that a single clever prompt, hidden in a feature nobody thought to lock down, was all it took. A translation request became a financial instruction, and the bot had no way to tell the difference because nobody had told it there was one to look for.
None of this means the agent era is a mistake. A bot that can sit in a research platform all day, flag an earnings surprise, and draft an order ticket is a genuinely useful tool, and plenty of people are already using Grok that way without incident. But there's a difference between a bot that drafts and a bot that executes, and 2026 is the year that line started blurring on purpose. Interactive Brokers built the execution path. xAI built the memory and the always-on compute. Traders are supplying the trust, one unsupervised session at a time, and the DRB heist is the only data point so far on what it costs when that trust turns out to be premature.
Frankly, the $100 liability cap is the detail that should worry anyone reading past the headline. A promise made on X is not a contract, and the contract is the thing that actually governs what happens the next time a bot gets tricked into moving money it was never supposed to touch.
Also read: AI agents are starting to do the work of research economists on Wall Street • AI neocloud stocks sink as CoreWeave debt fears spread to equities • ARC Prize rejects OpenAI's claim that Astra scored 99.9 percent on AGI test
This article is posted in AI News, check it out for more related stories.
Join the discussion #
Open in the community → Almost there. Sign in and your reply posts straight away.