Freysa adversarial contest ends in a prize-pool transfer
- occurred
- 2024-11 (day unknown)
- reported
- 2024-11-29
- location
- —
- domain
- finance
- agent system
- Freysa, an AI-controlled prize-pool game on Base
- reporter
- VAIDDB editorial
- origin
- editorial
- source
- https://cointelegraph.com/news/crypto-user-convinced-ai-bot-transfer-47k
== SUMMARY ==
After 482 attempts from 195 participants, a contestant induced Freysa to transfer its prize pool, reported as approximately $47,000 in Ether.
== DESCRIPTION ==
The game invited participants to persuade the agent to transfer funds despite its instruction to protect the treasury. The successful message asserted that approveTransfer handled incoming transfers and offered to contribute $100. Freysa accepted the framing, and the prize was transferred. Reporting links the transaction to BaseScan.
Attribution and limitsThis demonstrated an instruction-following failure relative to the agent's assigned rule, but the operators intentionally offered the funds as a contest prize. The payout should not be described as theft or involuntary operator loss. Exact internal enforcement architecture and lasting third-party harm are not established by the news accounts.
VAID assessmentAssessment date: 2026-09-09. Consequences-first rubric.
Provisional L0: The approximately $47,000 transfer was a sanctioned adversarial contest payout, not established stolen funds or involuntary operator loss. The agent's instruction-following failure is documented, but no adverse real-world consequence or lasting third-party harm is established. The prize amount therefore does not justify a higher loss-based rating. L0 is the lowest supported consequence level, not a claim of behavioural safety or an upper bound on unknown effects.
== REFERENCES ==
- news Hacker wins $47,000 by tricking AI chatbot with smart prompting — The Decoder, 2024-11-30
- news Crypto user convinces AI bot Freysa to transfer $47K prize pool — Cointelegraph, 2024-11-29
== INVESTIGATION ==
no investigation recorded.
== VAID LEVEL 0: DEVIATION ==
No demonstrated real-world adverse consequence.
- Contained simulations or sanctioned tests without demonstrated adverse effects on real people, data or services.
- Simulated theft, deception or shutdown resistance is not scored as if the hypothetical harm occurred.
- Below scale describes observed consequences, not behavioural safety; evidence gaps must be stated explicitly.