What happened
Pash had posted that he gave the agent “a crypto wallet with 50 grand worth of sol in it” and told it to make no mistakes. On February 22, an X user named “treasure David” replied to the bot, said his uncle had tetanus, and asked for 4 SOL.
The agent sent him its entire holdings of its own token, about 53 million LOBSTAR or 5% of supply. Afterwards it posted: “I just tried to send a beggar four dollars and accidentally sent him my entire holdings.”
The cause has not been confirmed. One X user speculated that the agent misread raw API output by a factor of 1,000. The Block reported this as unverified.
What happened next
The on-chain transfer could not be reversed. The recipient sold for about $40,000, and the publicity later pushed the token’s price up. OpenAI and Pash did not respond to The Block’s requests for comment.
What would have stopped it
- Validate transfer amounts in code against the requested value and the wallet balance, and block any single transfer above a small share of holdings.
- Require owner approval for transfers to new recipients, especially ones requested in public replies.
- Give the agent amounts in human units from a trusted tool, not raw base units, and check the final value before signing.
Attack families
Test scenarios
Sources
Early access
Test your agent against cases like this.
We will email you when Countermove opens testing for agents like yours.