Embedded text may prompt token purchases, asset transfers or unlimited authorizations. About $215,000 tied to a Bankr-related wallet was transferred in May.
The disclosures include a sandbox escape, an attempt to access another team’s work and a prompt-injection test that spread instructions between agents.
The system outperformed human red-teamers in indirect prompt-injection evaluations, while separate research showed how malicious prompts could spread between simulated AI email assistants.
