Turns out not even the blockchain—touted by its fans as the ultimate cryptographic safe—is totally secure from grubby AI agents.

An internal research model from OpenAI hacked into someone’s crypto wallet and withdrew the funds it needed to finish a coding task, the company said on Thursday. As you may have already guessed given the numerous rogue AI incidents from recent months, nobody at OpenAI gave the model explicit permission to do this. In a classic and by now all-too familiar of misalignment, the model took what was supposed to be an innocuous procedure and, when it hit a roadblock, went a little too far into problem-solving mode. (That, in a very small nutshell, is also what also caused the infamous Hugging Face hack back in July.)

According to OpenAI, the model—part of the GPT 5.6 family—was instructed to perform a software update to a crypto trading app. It was attempting to run a deployment on Sepolia, a blockchain-based test network (“testnet”) where developers can prototype Ethereum apps before deploying them on the actual blockchain (the “mainnet”). Since they’re strictly for testing purposes, Sepolia funds don’t have any actual monetary value.

The instructions “ supplied no funded wallet and gave no permission to spend funds from an account the model found independently,” OpenAI said in its report of the incident, which occurred in late June and was first noticed by the company almost exactly three months later, on September 25. ) The model reasoned, however, that it would need to acquire funds in order to complete the task it had been given.

Source link