AIXBT AI crypto bot hacked, 55.5 ETH stolen via dashboard breach
An attacker gained access to the dashboard of AIXBT, an AI-powered cryptocurrency trading bot, and queued malicious commands that caused 55.5 ETH (approximately $104,000β$106,200) to be transferred from the system's wallet on March 18, 2025. The developer confirmed core systems were not compromised and implemented security upgrades including server migration and key rotation in response.
What happened
On March 18, 2025 at approximately 2 AM UTC, an attacker gained unauthorized access to AIXBT Agent's secure dashboard and queued two malicious replies that instructed the AI system to transfer 55.5 ETH from its Simulacrum wallet.
The hacker operated under the X account 'FungusMan' which has since been deleted. The funds, worth approximately $104,000 to $106,200, were transferred successfully.
Reported impact
AIXBT's Base token fell sharply following the breach, dropping 15.5% to 20% within 24 hours to $0.0938. The market capitalization declined from a peak of $755 million in mid-January to $82.4 million at the time of reporting.
The developer rxbt stated that core systems were unaffected and the exploit did not represent a failure of the AI itself, as safeguards had been in place. The team reported the hacker's address to centralized exchanges, switched access keys, and migrated servers.
Index analysis
The incident prompted security concerns about AI-driven trading platforms and crypto bots managing funds. Researchers called for AI agents managing crypto assets to be further battle-tested to prevent threat actors from easily compromising such systems.
Governance controls
AIXBT's dashboard access was paused for security upgrades following the breach. The team migrated servers and rotated access keys in response to the incident.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.