An attacker used prompt injection and social engineering to trick an AI-linked wallet into transferring millions of tokens, exposing new risks in agent-based crypto systems.