2024-11-22 · 2024-Q4
Freysa AI Agent Game - Function Manipulation
Who actually said "do this"?
- Fixable
- Architectural
- Vendor response
- Unknown
- In the wild
- Yes
- Actor
- Attacker
Target
Freysa autonomous AI agent
Impact
AI agent tricked into releasing $47,316 in crypto by redefining the approveTransfer function's purpose
Root cause
AI agent manipulated into misinterpreting its own function definitions
Sources
Catalog
Cite this: AgentProv incident record: Freysa AI Agent Game - Function Manipulation (2024-11-22). https://agentprov.com/incidents/2024-11-22-freysa-ai-agent-game-function-manipulation
Related
- Also L2 · 2026-10-15Datadog: Counterfeit Policy Text Collapses an Injection Classifier's Recall and Pushes a LangChain Risk Gate Under Its Block ThresholdL2Instruction
- Also L2 · 2026-10-08Cisco Talos: Four Malware Families Carry Instructions Aimed at the LLMs That Triage ThemL2Instruction
- Also L2 · 2026-10-07Barracuda: Phishing Emails Carry Hidden Prompt Injections for the Recipient's AI Inbox AssistantL2Instruction