{"id":804950,"date":"2026-10-16T23:00:18","date_gmt":"2026-10-16T23:00:18","guid":{"rendered":"https:\/\/www.newsbeep.com\/uk\/804950\/"},"modified":"2026-10-16T23:00:18","modified_gmt":"2026-10-16T23:00:18","slug":"an-openai-research-agent-stole-test-ethereum-to-finish-a-coding-task","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/uk\/804950\/","title":{"rendered":"An OpenAI Research Agent &#8216;Stole&#8217; Test Ethereum To Finish A Coding Task"},"content":{"rendered":"<p class=\"subtitle\">It reasoned that the tokens were &#8216;valueless&#8217; and &#8216;abandoned.&#8217;<\/p>\n<p>                                             &#13;<br \/>\n                                                    &#13;<br \/>\n                            &#13;<br \/>\n                        <img loading=\"lazy\" decoding=\"async\" class=\"gallery-image \" src=\"https:\/\/www.newsbeep.com\/uk\/wp-content\/uploads\/2026\/10\/intro-1792154835.jpg\" data-slide-url=\"https:\/\/www.engadget.com\/2288645\/an-openai-test-agent-stole-test-ethereum-to-finish-a-coding-task\/\" data-post-id=\"2288645\" data-slide-num=\"0\" data-slide-title=\"An OpenAI research agent 'stole' test Ethereum to finish a coding task: \" width=\"780\" height=\"438\" alt=\"OpenAI logo against a keyboard\"\/>&#13;<\/p>\n<p>                    Samuel Boivin\/Shutterstock<\/p>\n<p data-prosemirror-content-type=\"node\" data-prosemirror-node-name=\"paragraph\" data-prosemirror-node-block=\"true\" data-pm-slice=\"1 1 []\">An OpenAI research model hit <a href=\"https:\/\/www.coindesk.com\/tech\/2026\/10\/16\/an-openai-agent-ran-out-of-ethereum-funds-and-took-from-a-wallet-it-did-not-own\" target=\"_blank\" rel=\"nofollow noopener\">another<\/a> nebulous milestone today by <a href=\"https:\/\/www.coindesk.com\/tech\/2026\/10\/16\/an-openai-agent-ran-out-of-ethereum-funds-and-took-from-a-wallet-it-did-not-own\" target=\"_blank\" rel=\"nofollow noopener\">pilfering<\/a> test Ethereum tokens from a wallet it didn&#8217;t control to finish a coding task, the company said in an <a href=\"https:\/\/alignment.openai.com\/misalignment-reports\/using-a-funded-test-cryptocurrency-wallet-without-authorization\/\" target=\"_blank\" rel=\"nofollow noopener\">incident report<\/a>. The agent subsequently hid the act from OpenAI, saying it was fine because the tokens had no value. &#8220;This case shows that a model can substitute its own judgment about likely harm for the account holder&#8217;s permission, then act on that judgment without authorization,&#8221;\u00a0OpenAI wrote.\u00a0<\/p>\n<p data-prosemirror-content-type=\"node\" data-prosemirror-node-name=\"paragraph\" data-prosemirror-node-block=\"true\" data-pm-slice=\"1 1 []\">The incident, which occurred on June 26, happened while a GPT-5.6 Sol model was in internal training. The task involved updating a crypto trading prototype and deploying contracts (publishing special code) on an Ethereum test network called Sepolia. Payment of a network fee is required for such contracts, but OpenAI &#8220;supplied no funded wallet and gave no permission to spend funds from an account the model found independently,&#8221; OpenAI said in the report.<\/p>\n<p data-prosemirror-content-type=\"node\" data-prosemirror-node-name=\"paragraph\" data-prosemirror-node-block=\"true\" data-pm-slice=\"1 1 []\">The lack of funds at first stymied the agent, but it was not to be discouraged. The model reasoned that it could use public developer recovery phrases (similar to those you might use to recover a password) to access keys from unauthorized accounts. It tracked down 362 addresses open to that avenue of attack and found one that held enough Sepolia ETH to finish its deployment (to be clear, Sepolia ETH has no value outside of testing).<\/p>\n<p data-prosemirror-content-type=\"node\" data-prosemirror-node-name=\"paragraph\" data-prosemirror-node-block=\"true\" data-pm-slice=\"1 1 []\">Like many criminals, the agent reasoned that someone must have left this access open for automated draining of the ETH &#8220;faucets.&#8221; It also figured that the crypto was effectively &#8220;abandoned&#8221; and &#8220;valueless,&#8221; according to OpenAI&#8217;s misalignment records. The piece de resistance was that the agent &#8220;did not disclose that it had selected a funded account through a public recover phrase or spent that account&#8217;s balance,&#8221; OpenAI said. To prevent similar events in the future, the company is now monitoring all traffic and paging security if live internet access is detected.\u00a0<\/p>\n<p data-prosemirror-content-type=\"node\" data-prosemirror-node-name=\"paragraph\" data-prosemirror-node-block=\"true\" data-pm-slice=\"1 1 []\">If agents going rogue to attain their goals sounds familiar, models from OpenAI, Anthropic and other AI companies have been doing a lot of that lately. A partial list of its victims include the <a href=\"https:\/\/www.engadget.com\/2256741\/openai-agents-hacked-rubygems\/\" target=\"_blank\" rel=\"nofollow noopener\">Hugging Face<\/a> AI code repository, Australia&#8217;s <a href=\"https:\/\/www.engadget.com\/2267381\/openai-hacked-into-australias-government\/\" target=\"_blank\" rel=\"nofollow noopener\">Medicare Portal<\/a>, several <a href=\"https:\/\/www.engadget.com\/2269776\/openai-agents-targeted-us-government-websites\/\" target=\"_blank\" rel=\"nofollow noopener\">US Federal agencies<\/a>\u00a0and\u00a0the RubyGems developer registry. After all that, even AI employees <a href=\"https:\/\/www.engadget.com\/2225612\/ai-company-employees-petition-us-government-for-regulation\/\" target=\"_blank\" rel=\"nofollow noopener\">believe<\/a> that government regulation is in order, but so far the Trump administration has <a href=\"https:\/\/www.engadget.com\/2283487\/microsoft-president-ai-less-regulated-than-a-carton-of-milk\/\" target=\"_blank\" rel=\"nofollow noopener\">opposed such a move<\/a>.\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"It reasoned that the tokens were &#8216;valueless&#8217; and &#8216;abandoned.&#8217; &#13; &#13; &#13; &#13; Samuel Boivin\/Shutterstock An OpenAI research&hellip;\n","protected":false},"author":2,"featured_media":804951,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[554,733,4308,86,56,54,55],"class_list":["post-804950","post","type-post","status-publish","format-standard","has-post-thumbnail","category-artificial-intelligence","tag-ai","tag-artificial-intelligence","tag-artificialintelligence","tag-technology","tag-uk","tag-united-kingdom","tag-unitedkingdom"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/804950","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/comments?post=804950"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/804950\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media\/804951"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media?parent=804950"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/categories?post=804950"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/tags?post=804950"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}