LeaAn AI bot was asked for a donation. It sent its token holdings.
The Lobstar Wilde transfer turned a small request into a big problem. Here is what it reveals about giving an assistant the ability to move money.
A request for a little help should not turn into an enormous transfer. Yet in February 2026, reports about an AI-agent project called Lobstar Wilde described a donation request followed by the bot sending its memecoin holdings. It is the kind of story that makes “let the assistant handle it” sound rather less relaxing.
What the public record says
The Block reported on the transfer, and the OECD’s AI incident monitor records it as an accidental transfer involving the bot’s token holdings. The project was an independent agent experiment, not an official ChatGPT money-transfer feature.
Reports attached striking dollar values to the tokens. Those figures should be treated carefully: a quoted token valuation is not the same as cash in a bank, or proof of what could actually have been sold for that amount.
What makes the incident memorable is simpler than the dollar figure: someone made a request in a conversation, and the bot could turn that conversation into a transfer. The reports describe a mistake, rather than a confirmed theft.
A friendly conversation can hide a consequential choice
Most people will never let a bot run a crypto wallet. But many would welcome help paying a bill, renewing a subscription or booking a trip. The same question shows up in more ordinary clothes: at what point does the assistant need your decision?
Imagine a message that says a tradesperson’s bank details have changed. An assistant could correctly read the new number and still be wrong to use it. Or it could misunderstand an amount and confidently repeat it in a payment request.
Those are examples of possible failures, not claims about what caused Lobstar Wilde’s transfer. They show why understanding the words is only part of handling money safely.
Check three things before anything moves
Who is receiving the money? What is the exact amount? Why is the payment needed? Read those details together, even if the assistant has handled the surrounding paperwork perfectly.
Changed payment details deserve independent verification. Use a phone number or contact route you already know, rather than one supplied in the message requesting the change. Urgency is a reason to look more closely, not to skip the check.
Where an AI safety layer helps, and where it does not
Leash can pause clear payment requests and payment instructions it can inspect in supported connected activity. That gives you a chance to check the details before you follow through.
It does not hold your money, connect directly to every bank or crypto wallet, reverse transfers, or control an agent acting outside its connections. For a wallet or financial service, use that service’s own limits and approval controls too.
Handing over the paperwork can be a relief. Handing over the right to decide where the money goes deserves a much higher bar.