{"slug": "hugging-face-numbat-repo-claims-leaked-anthropic-model-but-the-weights-look", "title": "Hugging Face ‘numbat’ repo claims leaked Anthropic model, but the weights look synthetic", "summary": "Community auditors determined that a 7.72 TB Hugging Face repository named \"numbat,\" uploaded by the week-old account burner22 on October 23, 2026 and billed as a mid-pretraining checkpoint from Anthropic's Mythos-class training run, is likely synthetic, according to an analysis dated November 1, 2026. The auditors found 43 tensors containing 730,368 BF16 values that regenerate exactly when a tensor's name is run through SHA-256 and used to seed a random number generator, and they noted the repo advertises roughly 14 trillion parameters across 114 layers while Hugging Face metadata lists approximately 6.8 trillion. The repo had logged about 5,846 downloads and more than 162 likes by November 1, and Anthropic has not issued a public statement on the claims.", "body_md": "# Hugging Face ‘numbat’ repo claims leaked Anthropic model, but the weights look synthetic\n\nAnthropic / Wikimedia Commons (Public domain)\n\nA 7.72 TB upload billed as a Mythos-class checkpoint appears to contain tensors generated from their own names\n\nA Hugging Face repository called “numbat” claims to hold a mid-pretraining checkpoint from [Anthropic](https://cryptobriefing.com/markets/anthropic/)’s upcoming Mythos-class training run. If real, it would be one of the most significant AI leaks on record.\n\nCommunity auditors say it probably isn’t real. Their analysis suggests at least part of the upload was manufactured from scratch rather than lifted from an Anthropic data center.\n\n## What the numbat repo claims to be\n\nThe repository sits under the username burner22, an account created on October 16, 2026. The upload followed a week later, on October 23, 2026.\n\nThe model described in the repo is enormous. It reportedly packs approximately 14 trillion parameters spread across 114 layers.\n\nThe claimed architecture also mixes a hybrid GDN/MLA design with 1,224 Mixture of Experts (MoE) components. MoE is a setup where the model is carved into many specialist sub-networks, and only a handful switch on for any given input.\n\nThe files themselves total around 7.72 TB across 772 safetensors shards. Safetensors is a common file format for storing model weights, chosen partly because it is safer to load than older formats.\n\nThe upload also includes configuration files and a byte-level BPE tokenizer with a vocabulary of 131,072 tokens.\n\n## Why auditors think the weights are fake\n\nThe most damaging finding came from a community analysis dated November 1, 2026. Auditors found 43 tensors, containing 730,368 BF16 values, that regenerate exactly from their own tensor names.\n\n### AI, tech, and the markets they move—in one daily briefing.\n\nDaily. Free. Join 34,000+ readers across crypto, finance, and policy.\n\nThe recipe works like this: take a tensor’s name, run it through a SHA-256 hash, and use the result to seed a random number generator. The output matches the stored values precisely.\n\nReruns of the test reportedly confirmed the matches were exact, not approximate. That precision is what moved the conversation from “suspicious” to “likely synthetic.”\n\nThe parameter count adds another wrinkle. The repo advertises roughly 14 trillion parameters, while Hugging Face’s own metadata lists approximately 6.8 trillion.\n\nAnalysts also flagged the overall weight distributions. According to community analyses, they look more like generated noise than the patterns expected from trained models such as Qwen2.5.\n\n## Why the ‘numbat’ name carries baggage\n\nThe codename itself is not random. “Numbat” was previously linked to a March 2026 leak of Claude Code source, which exposed a set of internal names.\n\nIt also cuts the other way. Anyone could have picked the name up from coverage of the earlier leak, so its presence proves familiarity with public reporting rather than access to Anthropic’s servers.\n\nInterest in the repo has been substantial anyway. By November 1, it had logged about 5,846 downloads and more than 162 likes.\n\nAnthropic has not issued a public statement on the repository or the claims attached to it.\n\n## What this means for AI labs, platforms and developers\n\nFor Hugging Face, the case raises an awkward point about scale. An anonymous week-old account was able to host 7.72 TB of disputed files and attract thousands of downloads before the strongest counter-evidence surfaced.\n\nWhat to watch next is whether further audits extend the synthetic-tensor finding beyond the first 43 tensors. A match across more of the 772 shards would turn “evidence suggests” into something closer to a closed case.\n\n**Disclosure:** This article was edited by Diego Almada Lopez. For more information on how we create and review content, see our [Editorial Policy](https://cryptobriefing.com/editorial-policy/).\n\n## More in AI\n\n[See all](https://cryptobriefing.com/artificial-intelligence/)", "url": "https://wpnews.pro/news/hugging-face-numbat-repo-claims-leaked-anthropic-model-but-the-weights-look", "canonical_source": "https://cryptobriefing.com/numbat-hugging-face-anthropic-leak-fake/", "published_at": "2026-11-02 10:38:11+00:00", "updated_at": "2026-11-02 10:51:38.914794+00:00", "lang": "en", "topics": ["artificial-intelligence", "large-language-models", "ai-safety"], "entities": ["Hugging Face", "Anthropic", "numbat", "burner22", "Mythos", "Claude Code", "Qwen2.5"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/hugging-face-numbat-repo-claims-leaked-anthropic-model-but-the-weights-look", "markdown": "https://wpnews.pro/news/hugging-face-numbat-repo-claims-leaked-anthropic-model-but-the-weights-look.md", "text": "https://wpnews.pro/news/hugging-face-numbat-repo-claims-leaked-anthropic-model-but-the-weights-look.txt", "jsonld": "https://wpnews.pro/news/hugging-face-numbat-repo-claims-leaked-anthropic-model-but-the-weights-look.jsonld"}}