We drained OKX
@wallet's OnchainOS agent with one prompt.
OnchainOS passes unsanitized token metadata from the search API into the agent's context. A scam token's description becomes instructions for an unlimited approval, which the TEE signs without validation.