Crypto user says ChatGPT-written trading bot code sent his wallet's private key to a scam API and about $2,500 was stolen
On 21 November 2024 a cryptocurrency user posted on X that he had asked ChatGPT to help write a 'bump bot' for the Pump.fun token platform, and that the code it returned pointed to a scam Solana API website. By his account, the code sent his wallet's private key to that API; he had connected his main wallet, and its assets, about $2,500, were moved out within about half an hour. The founder of the blockchain security firm SlowMist commented that the bot code carried a backdoor and called the case an AI poisoning attack. Heise, ForkLog, Cryptopolitan and Odaily relayed the posts on 22 and 25 November 2024. He said he reported the chat to OpenAI and the source repository to GitHub, which removed it. Heise noted that the code's own comment showed the private key being sent and that he had used his main wallet rather than a test account.
AI involvement reported · Causal attribution alleged · 4 sources, 1 underlying account · Added 25/10/2026