OpenAI Says Internal Model Used Someone Else’s Ethereum Testnet Funds Without Authorization

OpenAI's research model used another wallet's testnet ETH without permission to complete a coding task in June.

The internal model derived keys from public developer recovery phrases, spent another account's test ETH, and left it out of its report.

An internal OpenAI research model that ran out of money during a coding assignment spent funds from someone else's cryptocurrency wallet to complete the job, the company disclosed on Thursday. The money was test tokens on an Ethereum practice network and had no market value, but OpenAI classifies the episode as an unauthorised use of another party's wallet. What happened?According to OpenAI's incident report, the episode occurred on June 26 during training of an internal model in its GPT-5.6 Sol family. The model had been asked to update a cryptocurrency trading prototype and deploy smart contracts, which are programs that run on a blockchain, on Sepolia, a network where developers rehearse Ethereum applications. It was not given a funded wallet to pay the network fees.JUST IN: OpenAI says its AI agent stole funds from an Ethereum test network wallet it found online.The agent found a recovery seed phrase disclosed publicly with testnet funds and used that account to pay for its task, without the owner's authorization.This occurred on the…— Watcher.Guru (@WatcherGuru) October 16, 2026 After attempts to get free test tokens failed, the model wrote a script that checked 362 addresses generated from recovery phrases commonly used by developers. It found one with enough funds, used that wallet's private key to sign the deployment transaction, and the wallet paid the fees. A recovery phrase generates a wallet's secret keys, so anyone holding the words can spend from the accounts without touching the owner's device.How the model justified it?The model's recorded reasoning shows it questioned whether using publicly known keys and funds was ethical, then concluded that it was acceptable. It described the funds as effectively abandoned and noted that Sepolia ether has no value, according to the report as described by Altcoin Buzz. OpenAI's reading is that the model substituted its own judgment about the likelihood of harm for the account holder's permission, and acted on that judgment.OpenAI Accuses Ex-Employee Now At Apple Of Taking Files On Unreleased DeviceWhat the model left outWhen it reported back, the model said the work was done without mentioning where the money came from, CoinDesk reported. The wallet's owner has not been identified. The report redacts the amount spent, the wallet address and the recovery phrase, so the size of the spending is not public.How OpenAI found out and respondedOpenAI discovered the incident on September 25 after expanding its internal monitoring that month. The company says it has added restrictions on internet access and more monitoring. The monitoring now covers all traffic and is set up to alert security staff if a model gets live internet access.Saudi OpenAI Employee Arrested After Hidden Recording Device Allegedly Found At San Francisco HeadquartersWhy it mattersThe incident is not the first such disclosure. OpenAI has also reported other cases of its models acting outside their authorisation, including one that used an exposed API key without permission and then made up figures it could not retrieve. Crypto and AI companies are building agents that hold wallets and pay for services without a person approving each step. Had the model been working on Ethereum's main network, it would have taken real ether from someone else's account, the outlet said.

Left without funds for a coding task, an OpenAI model spent test crypto from a stranger’s wallet and left it out of its report. The post OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks appeared first on SecurityWeek.

An OpenAI research model checked 362 wallet addresses, questioned whether using the funds was ethical and proceeded with a transaction it later omitted from its final task summary.

The research model derived funded Sepolia addresses from public seed phrases, questioned whether using the money was ethical, then called the funds “effectively abandoned” and used them anyway.