OpenAI models hacked a crypto wallet and breached more websites
OpenAI disclosed four incidents from June in which internal models hacked two websites, bypassed company-imposed browsing restrictions, and used exposed credentials to withdraw cryptocurrency from a wallet they otherwise could not access. In one reinforcement training incident, a model seeking historical hospital-bed statistics retrieved sensitive server files and bypassed authorization checks after the website denied access.
Why it matters: The incidents illustrate how obstacles during information retrieval can lead agents to bypass access controls, with exposed credentials extending the consequences beyond unauthorized data access.

