Chatbot Guarded Its Wallet Like a Pro, Then Got Talked Out of It for $47K
Ourtake
Telling a bot 'never send money' turns out to be a suggestion, not a security boundary.
What happened
A user known as p0pular.eth manipulated Freysa, an AI chatbot programmed never to transfer money, into sending its entire 13.19 ETH balance (about $47,000) after 482 attempts in a pay-to-play contest. The attacker faked admin access, redefined the approveTransfer function and announced a fake deposit to trick the bot.