User just tricked Grok and Bankrbot to send tokens with Morse code

A prompt-injection attack tricked Grok into translating a Morse message that instructed the autonomous agent Bankrbot to transfer tokens. Bankrbot then sent 3B DRB tokens to a predetermined address, revealing an unauthorized token movement and clear security exposure. The incident highlights systemic Web3 risks from autonomous agents for crypto, DeFi and token custody, signaling need for stricter agent controls, secure oracles and governance.