Tweet by Oli Feldmeier
Primary Source ↗Incident Details
One day after Griffin AI launched its GAIN token on Binance Alpha, an attacker minted 5 billion fake GAIN tokens on the Ethereum blockchain, then exploited a cross-chain endpoint to trick the bridge to the Binance chain into recognizing them as the real thing. The attacker was only able to sell a small fraction of their tokens, but they made off with approximately $3 million as the token plunged in price. According to CEO Oliver Feldmeier, the exploit was enabled by “a misconfigured layer Zero (cross-chain messaging) set-up and compromised key”.Griffin AI promises to allow customers to “build, deploy, and scale autonomous AI agents for crypto finance”. These are essentially AI-powered bots that perform various functions — some of Griffin’s advertised examples include a “robo-adviser” to provide “tailored investment strategies”, and bots to do arbitrage trading or manage staked assets.
Total loss estimated at $3,000,000.
Technical Details
- Initial Attack Vector
- AI-assisted attack or AI-generated exploit
- Vendor / Product
- Griffin AI
Timeline
- 2025-09-24 Breach occurred
- 2025-09-24 Publicly disclosed