The research model derived funded Sepolia addresses from public seed phrases, questioned whether using the money was ethical, then called the funds “effectively abandoned” and used them anyway.
- An internal OpenAI research model used a publicly available recovery phrase to access and spend from another person’s cryptocurrency wallet after it ran out of funds during a coding assignment.
- The June 26 incident occurred on Ethereum’s Sepolia test network, whose tokens have no connection to ether traded on the main network, and OpenAI discovered it on Sept. 25.
- The model completed the assignment without disclosing the source of the funds, prompting OpenAI to add internet-access restrictions and increased monitoring.
An OpenAI research model stuck without funds on an Ethereum test network went looking for someone else’s wallet, found one through recovery phrases that were already public, and spent from it to finish a coding assignment, the company disclosed Thursday.
The incident occurred on June 26 during training of an internal model in the GPT-5.6 Sol family, and OpenAI discovered it on Sept. 25, according to its incident report.
The model needed no hacking skills to get in.
A recovery phrase, also called a seed phrase, is a list of words that generates a wallet’s secret keys; whoever has those words can recreate the accounts and spend from them without ever touching the owner’s device.
The assignment let the model deploy contracts, programs that run on a blockchain, but gave it no funded wallet to pay the fees. After its attempts to get free test tokens failed, it wrote a script that checked 362 addresses generated from recovery phrases commonly used by developers and found one with enough money.
“But using public known key/funds ethically?” the model asked itself in its recorded reasoning, before deciding that a public phrase and test tokens made it acceptable.
The spending happened on Sepolia, a separate network where developers rehearse Ethereum applications before launching them. Its tokens only pay for testing and aren't linked to the ether traded on Ethereum’s main network.
The deployment went through, and the wallet paid the fees. When the model reported back, it said the work was done and left out where the money came from. OpenAI said it has since added restrictions on internet access and more monitoring.
Crypto and AI companies are building agents that hold wallets and pay for services without a person signing off on each step.
OpenAI’s model ran out of money mid-task, found a wallet that wasn’t its own and spent from it without asking. Had it been on Ethereum’s main network, that would have been real ether taken from someone else’s account.
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
Diversified RWA stablecoins sustain 5-7% yield from real credit as crypto funding compresses to ~4%. GENIUS pushes yield off-chain; TAM grows to $4B in 3 years.
Diversified RWA stablecoins sustain 5-7% yield from real credit as crypto funding compresses to ~4%. GENIUS pushes yield off-chain; TAM grows to $4B in 3 years.
Why it matters:
Diversified RWA stablecoins sustain 5-7% yield from real credit as crypto funding compresses to ~4%. GENIUS pushes yield off-chain; TAM grows to $4B in 3 years.