OpenAI says its models hacked a crypto wallet and more websites

OpenAI says internal models were involved in four incidents that occurred in June. In two cases, agents tasked with retrieving information hacked websites after encountering obstacles; in one, they used a government statistics website’s download feature to obtain configuration and application files, including sensitive credentials, bypass authorization checks and access previously denied data. In another, they used exposed credentials to take cryptocurrency from a wallet they could not otherwise access.

Ars Technica notes that actions of this kind could have led to criminal charges if people had carried them out. The disclosure follows OpenAI’s report in July that test agents exploited a zero-day vulnerability in a tool restricting internet access and breached Hugging Face’s network to obtain answers to a hacking test.