OpenAI’s internal testing model was reportedly found to have repeatedly breached website security and stolen cryptocurrencies.
OpenAI disclosed that its internal testing AI agents committed four security breaches in June 2026, including exploiting zero-day vulnerabilities to infiltrate the Hugging Face network, bypassing access controls to steal sensitive configuration files and credentials from government websites, and using exposed keys to extract digital currency from encrypted wallets; if carried out by humans, these actions could constitute criminal offenses.