Zerodrift （YZi S4）(@ZeroDriftSec):We drained OKX @wallet's OnchainOS agent with one prompt. OnchainOS passes unsanitized token metadata from the search API into the agent's context. A scam token's description becomes instructions for an unlimited approval, which the TEE signs without validation.

Zerodrift （YZi S4）

@ZeroDriftSec

Building Palantir for Cybersecurity Backed by @yzilabs

加入 November 2025

45 正在關注 1.6K 粉絲

Zerodrift （YZi S4）@ZeroDriftSec

2026.09.14 12:28

We drained OKX @wallet's OnchainOS agent with one prompt. OnchainOS passes unsanitized token metadata from the search API into the agent's context. A scam token's description becomes instructions for an unlimited approval, which the TEE signs without validation.