Agent-money incidents

Newest public cases of AI agents and bots losing money, with sources.

1. Bloom Telegram trading bot wallets drained of 9,408 SOLOct 26, 2026 · $953K · confirmed · Trading bot
2. Swell oracle bot and operational hot keys taken over, swETH and rswETH rates pushed up without backingOct 22, 2026 · near-miss · reported · Keeper, oracle or market-maker bot
3. x402 SDK default client had no spending cap, so a hostile API could request an agent's full token balanceOct 22, 2026 · near-miss · confirmed · Agent payment rail
4. x402 TypeScript Solana facilitator accepted a token approval that moved no funds as a valid paymentOct 22, 2026 · near-miss · confirmed · Agent payment rail