AI trading bot misreads tweet, sends $441K of tokens to a stranger
anonymous (OpenAI employee side project) · Oct 1, 2025 · Trading agent
What happened
An AI trading bot built by an OpenAI employee misinterpreted a social media post and sent approximately $441,000 worth of tokens to an unintended address. The case became a widely cited example of how easily autonomous agents can make costly, irreversible mistakes.
Causal vector
Agent acted on misparsed social-media signal and executed an irreversible on-chain transfer
Source
Reported by PumpParade (Medium). Sourced from a secondary summary; flagged pending a stronger primary source.
A $441K single transfer shatters any sane per-transaction cap. Above an approval threshold, the firewall returns FLAGGED and the transfer waits for a human; the irreversibility of on-chain transfers is exactly why a hard external gate, not a prompt, must govern them.
The six rule types that contain this class of failure
Per-transaction cap
Any single spend above your ceiling is BLOCKED before it moves.
Daily total
Cumulative spend across all agent calls, bounded per day.
Velocity limit
Stops runaway retry loops — the #1 cause of overnight losses.
Merchant allowlist
Only approved destinations can ever receive funds.
Category rules
Flag high-risk classes (crypto, infra, refunds) for review.
Approval threshold
Above a value, the action waits for a human.
Related incidents
SEC charges $12M 'AI crypto trading bot' as a Ponzi scheme
Nathan Fuller · Nov 1, 2025
Clawdbot trading agent reportedly loses $1,000,000
Clawdbot (open-source project) · Oct 1, 2025
Don't be the next entry
Every incident in this database is the result of trusting a prompt, a provider cap, or a human review cycle. sipi.bot replaces all three with one deterministic call. 27 documented failures, one control.