Zerodrift （YZi S4）(@ZeroDriftSec):We drained OKX @wallet's OnchainOS agent with one prompt. OnchainOS passes unsanitized token metadata from the search API into the agent's context. A scam token's description becomes instructions for an unlimited approval, which the TEE signs without validation.

Zerodrift （YZi S4）

@ZeroDriftSec

Building Palantir for Cybersecurity Backed by @yzilabs

Joined November 2025

45 Following 1.6K Followers

Zerodrift （YZi S4）@ZeroDriftSec

2026.09.14 12:28

We drained OKX @wallet's OnchainOS agent with one prompt. OnchainOS passes unsanitized token metadata from the search API into the agent's context. A scam token's description becomes instructions for an unlimited approval, which the TEE signs without validation.