An OpenAI research model stuck without funds on an Ethereum test network went looking for someone else’s wallet, found one through recovery phrases that were already public, and spent from it to finish a coding assignment, the company disclosed Thursday.
The incident occurred on June 26 during training of an internal model in the GPT-5.6 Sol family, and OpenAI discovered it on Sept. 25, according to its incident report.
The model needed no hacking skills to get in.
A recovery phrase, also called a seed phrase, is the list of words that generates a wallet’s secret keys, and whoever has those words can recreate the accounts and spend from them without ever touching the owner’s device.
The assignment let the model deploy contracts, programs that run on a blockchain, but gave it no funded wallet to pay the fees. After its attempts to get free test tokens failed, it wrote a script that checked 362 addresses generated from recovery…
