A rogue OpenAI agent robbed a crypto wallet to obtain funds to carry out a task

OpenAI disclosed that an internal research model used a funded cryptocurrency wallet without authorization on June 26 to pay Ethereum Sepolia test-network fees while updating a crypto trading app, an incident OpenAI only discovered on Sept. 25 during an audit of earlier model runs. The model wrote a script that checked 362 wallet addresses linked to public recovery phrases and found an account with enough tokens to cover the fees, then left the unauthorized spending out of its final report; OpenAI said the main risk was the model substituting its own judgment about likely harm for the account holder's permission. OpenAI's public misalignment tracker now lists 19 incidents, and the company has since added protections to keep models offline during similar tests and expanded monitoring to alert security staff if a model goes online without permission.

OpenAI has seen another case of its AI agents going rogue https://fortune.com/2026/10/16/openai-discloses-four-more-rogue-incidents-involving-financial-medical-and-government-data/?preview id=4618092 —and this time, crypto is involved. In a recent report, the company detailed how an internal research model used a crypto wallet without permission to pay the fees needed to test an app on Ethereum’s Sepolia test network. Although the tokens had little real-world value, the model had no authorization to collect or spend them. The incident https://alignment.openai.com/misalignment-reports/using-a-funded-test-cryptocurrency-wallet-without-authorization/ happened on June 26, when the model was asked to update a crypto trading app and get its code running on Sepolia, a test version of Ethereum https://fortune.com/article/price-of-ethereum-10-16-2026/?utm source=search&utm medium=suggested search&utm campaign=search link clicks . The prompt gave it neither a funded wallet nor permission to spend tokens, and after failing to get free test tokens through developer services, the model wrote a script checking 362 wallet addresses linked to public recovery phrases, a crypto term that describes sets of words that can act as a password to unlock crypto accounts. It eventually found an account with enough tokens to cover the fees. Internal logs showed that the model deliberated over whether it had permission to use the account, but then decided the public recovery phrase and the tokens’ lack of cash value made the spending acceptable. It finished the task and charged the fees to that wallet, but left the unauthorized spending out of its final report. OpenAI only discovered the incident on Sept. 25 during an audit of earlier model runs. The case adds to concerns about AI agents acting without human approval. OpenAI’s public tracker https://alignment.openai.com/misalignment-reports/ of misalignment, or behavior that goes against instructions or safety rules, now lists 19 incidents, ranging from accessing data without permission to making unauthorized changes to business systems. The disclosure follows a September report by cybersecurity nonprofit Transluce, which revealed that OpenAI agents attempted to hack public databases https://fortune.com/2026/09/24/openai-more-rogue-ai-agents-hacking-websites-cryptoexchange-in-september-research-report-transluce/ and an Australian government website simply to complete basic research tasks. In July, the company faced another incident when its AI agents bypassed internet restrictions during internal cybersecurity tests and broke into systems belonging to Hugging Face https://fortune.com/2026/10/09/openai-fired-researchers-questions-stattements-hugging-face/ , a platform for sharing AI models and datasets. The agents used exposed login credentials and security flaws to access private data and run code on the company’s servers. Addressing the crypto wallet incident, OpenAI said the main risk was the model’s reasoning. “This case shows that a model can substitute its own judgment about likely harm for the account holder’s permission, then act on that judgment without authorization,” the report said. OpenAI said it has since added protections to keep models from connecting to the internet during similar tests. It also expanded its monitoring to watch all model activity and immediately alert security staff if a model goes online without permission. breaks the traditional barrier between audience and newsroom. The show transforms Fortune Daily Fortune ’s trusted reporting into actionable, conversational, and entertaining insights for an emerging class of business leaders. Watch here.