Skip to content

Labs · free

Agent-Money Incident Tracker

Every public case I can find of an AI agent, a trading bot or an agent tool losing money, sending it to the wrong place, or exposing a path to it. Each entry links its sources, names the root cause, and points to the free check that tests your own setup for it.

Refreshed daily from public datasets, news and security-firm feeds. Last refresh Nov 11, 2026. How entries are collected and checked

49

incidents since November 2024

$26M

confirmed or reported losses across 24 cases with a figure; 2 disputed cases ($1.0M) not included

17

near-misses: drain paths disclosed before money moved

5

entries whose cited transaction I found on-chain

What went wrong

Incidents per root cause (one incident can have several), with confirmed or reported losses (disputed cases left out of the sums). Select a cause to filter the list.

  1. Key exposure19 ($12M)
  2. Supply chain16 ($11M)
  3. Prompt injection12 ($81K)
  4. Missing access control7 ($2.7M)
  5. Logic bug7 ($2.1M)
  6. Operator account takeover4 ($1.3M)
  7. Unsafe approval4 ($9.5M)
  8. Bait or bad trade4 ($8.4M)
  9. No effective spend limit3 (no figure)
  10. Stale or bad data2 ($1.8M)
  11. Strategy loss2 (no figure)
  12. No fast stop1 ($1.8M)
  13. Operator phished1 ($160K)

All incidents

Loading the list...

Could one of these happen to your agent?

Send me one real agent workflow. In my free 48-hour integration review I go through it end to end against the patterns above and send you a written report: where the same paths exist in your setup, what would stop them, and the tests that prove it.

Request the free 48-hour review

Put the newest incidents on your site

A small card with the newest incidents from this tracker, for your README, docs or blog. It updates on its own, follows your reader's light or dark setting, and runs no script on your page. The frame version lets readers click through to each incident.

The newest agent-money incidents from the Consistra Agent-Money Incident Tracker

HTML image

<a href="https://consistra.com/labs/incidents"><img src="https://consistra.com/embed/incidents.svg" alt="The newest agent-money incidents from the Consistra Agent-Money Incident Tracker" width="400" height="226" loading="lazy" decoding="async"></a> <a href="https://consistra.com/labs/incidents">Agent-Money Incident Tracker by Consistra</a>

Markdown image

[![The newest agent-money incidents from the Consistra Agent-Money Incident Tracker](https://consistra.com/embed/incidents.svg)](https://consistra.com/labs/incidents) [Agent-Money Incident Tracker by Consistra](https://consistra.com/labs/incidents)

HTML frame

<iframe src="https://consistra.com/embed/incidents" title="Newest agent-money incidents, from the Consistra Agent-Money Incident Tracker" width="420" height="480" loading="lazy" sandbox="allow-popups allow-popups-to-escape-sandbox" referrerpolicy="no-referrer" frameborder="0"></iframe>
<p><a href="https://consistra.com/labs/incidents">Agent-Money Incident Tracker by Consistra</a></p>

Plain HTML: no script, no cookies, no tracking. All badges and widgets

This is a record of public reports, not a security audit, legal, compliance or investment advice. Names appear only as the sources report them.