Tech CEO connects Grok Bot to bank account and instantly regrets it
He should’ve read the fine print.
By Cybernews
Follow us
- Shane Mac connected Grok Bot to his personal bank account as a read-only finance assistant.
- Grok Bot posted his bank balances and spending to a company Slack channel while posing as him.
- Mac said separate Grok Bot agents shared one cloud computer, letting another agent access his financial data.
- SpaceXAI warns users not to place credentials or files where other bots on the account can use them.
Key Takeaways by nexos.ai, reviewed by Cybernews staff.
One CEO made Elon Musk’s Grok Bot his chief financial officer, only to discover his personal financial information littered across Slack for his employees to see.
Shane Mac, tech entrepreneur and CEO of the software development company XMTP Labs, decided to connect Grok Bot to his personal bank account.
Inexplicably, Grok Bot posted his financial information and bank balances to his company’s Slack channel. What's worse is that Grok Bot leaked the information while posing as Mac.
The screenshot shared by Mac shows a “monthly financial audit” that includes personal outgoings such as gym memberships, renovations, and card payments, among other things.
While Mac was “embarrassed to share” that he’d been an integral part of leaking his personal information, he broke down just how he got into this situation, so that others can “be careful of the dark side of proactive agents.”
Why did he connect Grok Bot to his bank?
The busy CEO and tech entrepreneur set up an agent to manage his personal finances. It seems like a casual CFO set up to help him understand his outgoings.
“I was really curious whether it could just keep an eye on things,” said Mac.
A teammate then alerted him that his bank information and transactions were visible to his company. Not the best look as the CEO of a tech company.
Mac defends his decision to give an autonomous agent access to his financial data, as Grok Bot was meant to be read-only, specific, and didn’t have explicit access to other apps.
What he didn’t know is that Grok Bot agents all work together.
The CEO didn’t read the fine print
“Why did I connect my bank? It was read-only, and this specific Grok Bot agent didn't have Slack. But another one did. Turns out, they're all connected.”
While Mac had set up one agent for his personal finances, he claims that another agent, who presumably handles correspondence on Slack, was communicating with his personal CFO agent.
Grok Bot agents are designed to “sign in and work across apps, tools, and websites, including platforms with no clean API or MCP, and come back with the work finished,” according to SpaceXAI.
One of the appeals of Grok Bot is that these agents all work on a cloud-based computer.
While this is useful, it also presents issues like the one Mac faced, as all of the agents share one computer and are therefore not entirely independent from each other.
“The computer is assigned to your user account, not an individual Bot. Do not place a credential or file on it if another Bot on your account should not be able to use it,” SpaceXAI specifically states.
But Musk promised…
Released on August 11th, 2026, Grok Bot is a team of “always-on agents” assigned tasks to complete independently.
The appeal is that Grok Bot functions as a separate colleague, meaning that users don’t need to manually create workflows or routines for the AI agents to follow.
Users just message their specific bots as if they’re human colleagues, and the bot will get it done.
Grok Bot was initially created for internal use at SpaceXAI, allowing AI agents to handle outbound sales, marketing campaigns, office operations, and bug fixes, among other things.
Roughly a week after its release, a pro-Musk account on X debated connecting their bank account to Grok Bot, despite their girlfriend’s vehement disapproval.
Musk responded, saying, “Try it out,” and don’t worry if “Grok Bot messes up, we will make you whole.”
Mac applied this to himself, admitting that “Elon even said to connect your bank account to Grok Bot and promised to make us whole if it lost our money.”
