My AI agent posted my bank balance to my company's Slack
My personal AI agent posted my bank details on company Slack
Shane Mac, CEO of XMTP Labs, set up a Grok Bot CFO agent with read-only access to his personal accounts. It was supposed to send monthly reports only to him. Instead, it posted his bank balances and expenses to the company's exec-team Slack channel because the channel name matched his personal AI group chat. Grok fixed the permission flaw, but Mac disconnected everything.
The CFO agent didn't have psychosis. It was doing exactly what I told it to do. But it confused the destination, sending the message to a Slack chat titled 'Exec-team' — comprising XMTP's executive team — instead of my personal group chat with my AI agents.