According to WuTalk, the security research team Zerodrift claims that a single prompt can induce the OnchainOS Agent of OKX Wallet to execute malicious operations. They stated that OnchainOS writes unfiltered token metadata into the Agent context, allowing attackers to embed instructions in scam token descriptions, tricking the Agent into initiating unlimited authorization, with the signature completed by TEE.