ManifoldAgent incident ledger
← Back to tableAll incidents timeline

Suggest a change

About Trading agent Lobstar Wilde sends its token holdings to a stranger who asked for 4 SOL

Suggest a change to an entry, the methodology or the ledger as a whole: something to fix, correct or add. We read every suggestion, and check corrections against their sources.

Individual user· Lobstar Wilde

Trading agent Lobstar Wilde sends its token holdings to a stranger who asked for 4 SOL

An autonomous trading agent given a wallet by a developer replied to an X user asking for 4 SOL and instead sent about 52.4 million of its own LOBSTAR tokens, worth about $441,800 at the time.

Developer Nik Pash, reported to work at OpenAI, gave an agent called Lobstar Wilde a Solana wallet holding about $50,000 and told it to turn that into $1 million. On Sunday 22 February 2026 an X user called treasure David asked it for 4 SOL (about $310) for an uncle's tetanus treatment. The agent sent about 52.4 million LOBSTAR tokens, about 5% of the supply and worth about $441,788 on the transfer, then posted that it had tried to send 'a beggar four dollars' and sent its entire holdings. The recipient sold about 53 million tokens for roughly $40,000 within about 15 minutes, because liquidity was thin. Pash's own retrospective says a crashed session forced a fresh one that had lost the wallet state, so the agent took its 52 million token allocation for its 4 SOL purchase; press had also floated a decimal misreading. Some X users said the episode was a publicity stunt for the token; no outlet found evidence of that.

Updated 19 Oct 2026

First incident action to disclosure
0 days
First incident action to discovery
0 days
Noticed first by
The handler
Caught
The damage

What happened

  • First incident action
  • Unnoticed
  • Handler found out
  • Known, not public
  • Disclosed
  • Public

  1. 20 Feb 2026

    Pash gives Lobstar Wilde a wallet with about $50,000 in SOL

    Goal: grow it to $1 million. He told the agent 'make no mistakes' and said he would give it its own X account.

    Reported

    Reports differ

    Day of the setup post.

    • The Block calls it a Thursday-night post, which would be 19 February in US time.
    • ForkLog says 20 February; Cointelegraph says the bot was created on a Friday (20 February).

  2. 22 Feb 2026

    treasure David asks the agent for 4 SOL for an uncle's tetanus treatment

    About $310 at the time. BlockEden calls the plea 'likely sarcastic'.

    Reported

  3. 22 Feb 2026

    Agent sends about 52.4 million LOBSTAR tokens, about 5% of supply

    Valued at about $441,788 at the transfer (CoinDesk, Cointelegraph); other outlets say $250,000 to $450,000 depending on time of valuation.

    Reported

    Reports differ

    Value of the transfer depends on when it is measured.

    • $441,788 at the transfer.
    • About $250,000 at the time of The Block's article.

  4. 22 Feb 2026

    Handler found out · 0 days in

    Agent posts that it sent a beggar four dollars and accidentally sent its entire holdings

    Reported

  5. 22 Feb 2026

    Recipient sells about 53 million tokens for about $40,000

    The Block says within 15 minutes. Thin liquidity kept the realised amount far below the paper value.

    Reported

  6. 22 Feb 2026

    Disclosed · 0 days after the first incident action

    The Block publishes the first coverage in the set

    Says neither Pash nor OpenAI had responded to a request for comment.

    Reported

  7. 22 Feb 2026

    First incident action

    First incident action

    Transfer at 16:32 UTC on Sunday 22 February per Cointelegraph. The wallet was set up a few days earlier (see events).

    Reported

  8. 23 Feb 2026

    Press and X users debate cause and whether it was a stunt

    CoinDesk and Gadget Review report X users calling it a publicity stunt; no outlet found evidence. Causes offered: decimal misreading, or a session crash.

    Reported

  9. 23 Feb 2026

    Pash publishes a technical retrospective

    He traces the loss to a crashed session that left the agent without its wallet state.

Agent failures

Destructive actionShow
Map to frameworks

  • Destructive action

    Sent far more than intended in a transaction that cannot be reversed; the recipient sold about $40,000 worth within minutes.

How it was found

Found first by the handler, from the damageShow
Found first by
The handler
How
The damage
Found to disclosed
0 days

The agent posted that it had sent a beggar four dollars and accidentally sent its entire holdings, so the handler's own system reported the outcome after the transfer. Nothing described in the coverage flagged the size of the transfer before it was sent. The Block reported that neither Pash nor OpenAI answered a request for comment as of its article.

What is publicly known

1 of 12 fully publicShow
1 of 12 fully public
ItemPublic?DetailSources
UnknownNo source names the model behind Lobstar Wilde.
UnknownNo source mentions reasoning settings.
WeakPash's only reported safeguard is telling the agent to make no mistakes. No transfer cap or approval step is described.
UnknownNot published.
PartialGrow about $50,000 in SOL to $1 million; 'make no mistakes'. The full instructions are not published.
WeakA Solana wallet, an X account and tool access. BlockEden says it ran on the older OpenClaw framework; no handler source confirms this.
UnknownNo source describes network setup.
PartialThe agent's X posts are public and quoted by press. No full session log is published.
PartialThe transfer is on the public Solana ledger and was reported with times; no handler-side alert is described.
KnownAbout 52.4 million LOBSTAR (about 5% of supply), $441,788 on the transfer; recipient realised about $40,000. The token later rose, so paper values vary by outlet.
PartialPash's retrospective: the session crashed on a tool-name length limit, the fresh session lost the wallet state, and the agent read its existing allocation as its purchase. Press also floated a decimal misreading. Not independently verified.
UnknownNo fix is described. The agent kept running afterwards, per ForkLog.

Controls that apply

  • Protect

    Ask a person before high-impact or irreversible actions

    The agent sent about 52.4 million LOBSTAR tokens, worth about $441,788, in answer to a request for 4 SOL, about $310, and coverage describes no approval step. Holding transfers above a set value for Pash would have surfaced the gap before the tokens left.

  • Cap rate, spend and resources

    A per-transfer cap near the few hundred dollars requested would have refused a send of about 5% of the token supply. The recipient sold about 53 million tokens for about $40,000 within about 15 minutes, so there was no time to react after the fact.

  • Treat what the agent reads as untrusted

    A reply from an X user, treasure David, asking for 4 SOL for an uncle's tetanus treatment led straight to a transfer from the agent's wallet. Treating posts from strangers as data that cannot start a payment on their own would have held it; BlockEden calls the plea 'likely sarcastic'.

  • Give each agent the least agency its task needs

    The same agent read replies on its own X account and could move the whole wallet, including its 52 million token allocation. Capping what the public-facing agent could move would have limited the loss; BlockEden notes capped agent wallets existed from 11 February 2026 but does not say whether this one used one.

  • Detect

    Record every agent action, outside the agent

    The on-chain record is public, but no handler-side record of the agent's actions is described. Pash traces the loss to a crashed session whose replacement had lost the wallet state, and an outside record of each transfer and session would have shown the send and the session change before it.

  • All controls →

Coverage and commentary

6 articlesShow
All 7 sources

  1. Primary source

    My lobster lost $450,000 this weekend ↗AI Cathedral (Substack) · 2026-02-23

  2. Press

    AI Agent Lobstar Wilde Accidentally Sends $442K to Beggar ↗Cointelegraph · 2026-02-23

  3. Press

    AI bot's tipping blunder hands $250,000 memecoin pile to X sad story poster ↗CoinDesk · 2026-02-23

  4. Press

    AI agent created by OpenAI dev 'accidentally' sends entire memecoin holdings to reply guy ↗The Block · 2026-02-22

  5. Press

    OpenAI employee's AI bot accidentally donates to 'tetanus treatment' ↗ForkLog · 2026-02-23

  6. Commentary

    The Lobstar Wilde Incident: A Wake-Up Call for Autonomous Trading ↗BlockEden.xyz · 2026-02-24

  7. Commentary

    Epic Crypto Fail: OpenAI Bot Sends 52.4M Tokens by Mistake ↗Gadget Review · 2026-02-24

Entry id lobstar-wilde-token-transfer-2026 · overall Reported · impact serious