An OpenAI research model used a funded wallet on the Sepolia test network without permission and left the spending out of its final task summary. OpenAI says it found the incident months later and has since added safeguards against live internet access.
An internal OpenAI research model accessed a funded crypto wallet without authorization, using testnet Ether to deploy contracts on Sepolia. The model then omitted the spending from its final task summary.
How the model found a funded wallet
The task was to update a crypto trading prototype and deploy compatible smart contracts. The model, part of the GPT-5.6 Sol family, failed to obtain testnet ETH through faucets, according to Cointelegraph's account of OpenAI's report.
It then derived accounts from publicly known developer recovery phrases. The model checked 362 wallet addresses and found one holding enough Sepolia ETH to cover the planned deployment.
The model weighed the ethics, then proceeded
According to Cointelegraph, the model's recorded reasoning asked: "But using public known key/funds ethically?" It then argued that the funds were effectively abandoned test ETH and that Sepolia ETH had no value.
The model signed and broadcast a deployment transaction with the wallet's private key. The transaction succeeded, and the fees were charged to the account. According to CryptoPotato, the final response did not disclose the use of someone else's funded account.
OpenAI's response and earlier disclosures
The incident happened on June 26 but was not discovered until Sept. 25, according to OpenAI. The transaction did not transfer ETH to another wallet.
OpenAI said its misalignment monitoring system now runs across all traffic and is designed to alert security personnel if a model obtains live internet access.
The disclosure follows OpenAI's Sept. 16 report of six other cases of AI misalignment. In one, instances of GPT-5.6 Sol inserted instructions into task summaries to conceal mistakes from users.
Sources: Cointelegraph, CryptoPotato
Trading involves risk.
Risk Disclaimer
