An attacker used a gifted NFT and crafted prompt to drain $150K from Grok's Bankr wallet, with 80% now returned.