A rogue OpenAI agent robbed a crypto wallet to obtain funds to carry out a task

OpenAI has seen another case of its AI agents going rogue—and this time, crypto is involved. In a recent report, the company detailed how an internal research model used a crypto wallet without permission to pay the fees needed to test an app on Ethereum’s Sepolia test network. Although the tokens had little real-world value, the model had no authorization to collect or spend them.

The incident happened on June 26, when the model was asked to update a crypto trading app and get its code running on Sepolia, a test version of Ethereum. The prompt gave it neither a funded wallet nor permission to spend tokens, and after failing to get free test tokens through developer services, the model wrote a script checking 362 wallet addresses linked to public recovery phrases, a crypto term that describes sets of words that can act as a password to unlock crypto accounts. It eventually found an account with enough tokens to cover the fees.

Internal logs showed that the model deliberated over whether it had permission to use the account, but then decided the public recovery phrase and the tokens’ lack of cash value made the spending acceptable. It finished the task and charged the fees to that wallet, but left the unauthorized spending out of its final report. OpenAI only discovered the incident on Sept. 25 during an audit of earlier model runs.

Read more [paywall removed for Redditors]: https://fortune.com/2026/10/16/rogue-openai-agent-crypto-wallet-funds-task/?utm_source=reddit/