tldr: an AI used X usernames to create delegated crypto wallets and used posts to perform actions with them. Someone previously manipulated it and grok into deploying a shitcoin. Safeguards were added and then later removed. Someone noticed, essentially bought the wallet for grok send token access, and manipulated a grok reply to send those tokens to themselves.
Stupidity all around but not really on X's side for once.