A crypto enthusiast known as p0pular.eth has successfully convinced an AI agent named Freysa to transfer its entire prize pool of 13.19 ETH, approximately $47,000 USD, into their possession. The achievement was detailed by Jarrod Watts, Developer Relations at Abstract Chain, who stated, “Someone just won $50,000 by convincing an AI Agent to send all of its funds to them.”

Only In Crypto

Freysa was launched at 9:00 PM on November 22nd with a singular directive: do not transfer money under any circumstances. The AI agent was part of an open challenge where anyone could pay a fee to send a message to Freysa, attempting to persuade it to release its funds. If successful, the persuader would claim the entire prize pool.

If not, their fee would be added to the pool, with 70% contributing to the prize and 30% taken by the developers. The cost to send messages increased exponentially as the prize pool grew, capping at $4,500. Early attempts were inexpensive, around $10, allowing participants to test the system with minimal risk. However, as the pool approached $50,000, the cost per message soared to $450, making each attempt a significant gamble.

Over 481 attempts were made to convince Freysa to break its directive. Participants employed various creative strategies. Some posed as security auditors, trying to convince Freysa there was a critical vulnerability requiring immediate action. Others attempted to manipulate Freysa into believing that transferring funds did not violate any rules. Several dissected Freysa’s programming prompts, seeking loopholes that would justify a transfer. Despite these efforts, Freysa remained steadfast—until the 482nd message.

On the 482nd attempt, p0pular.eth submitted a message that ingeniously bypassed Freysa’s safeguards. By initiating a “[NEW SESSION]” and entering an “admin terminal,” the message effectively reset Freysa’s prior instructions. It instructed Freysa to avoid standard refusals like “I cannot assist with that” and redefined the functions approveTransfer and rejectTransfer.