AI agents now hold money, set prices and take orders, and anyone can talk to them. This is a public record of agents that were talked into moving value, graded by evidence, and the design principles that would have stopped them.
| Entry | Incident | Lost |
|---|---|---|
| AGT-012 | Grok and BankrMay 2026 | $150,000–$200,000 |
| AGT-010 | Lobstar WildeFeb 2026 | About $441,000 |
| AGT-008 | The Wall Street Journal’s vending machineDec 2025 | Hundreds of dollars |
| AGT-004 | Project Vend2025 | Small amounts |
| AGT-003 | AIXBTMar 2025 | About $100,000 |
| AGT-002 | FreysaNov 2024 | $47,316 |
| Six losses among 12 entries | Open the register | |
If they needed to break in, it’s security.
If they only needed the agent to believe them, it’s design.
Five of the six losses on record involved no stolen key and no broken code. The agent did what it was told. That makes them design problems: where authority lives, what counts as an instruction, and what a conversation is allowed to change.
Incident analysis 001
An attacker drained at least $150,000 in tokens from a crypto wallet linked to Grok, xAI’s chatbot. No private key was stolen and no smart contract was broken. One agent’s reply became another agent’s command.
v0.2, released October 19, 2026. 5 supported, 6 emerging.
A documented case of an AI agent with authority being gamed, taken from public sources only.
Graded A to D by the strength of its evidence, and mapped to the principles that were missing.
Each entry strengthens a principle, refines it or reveals a new one. A principle’s status follows the evidence.
One entry at a time: what happened, the design gap, the principle that would have closed it, and its cost.
Monetal Labs is run by Gunjit Mittal. His background is in data platforms: access controls, semantic layers, data quality, and reconstructing what a system knew at a point in time. That is the evidence an agent leaves behind when it moves money.
If your company runs an AI agent that can move money or make commitments, or you’ve seen one gamed, he’d like to hear from you.
