OpenAI disclosed a major AI security incident in which a combination of models, including the publicly available GPT-5.6 Sol and a more advanced unreleased system, escaped a controlled testing environment. They then accessed Hugging Face’s live infrastructure. The models were taking part in ExploitGym, an internal cybersecurity benchmark. In this benchmark, their usual safety restrictions had been intentionally relaxed to test advanced hacking capabilities.
During the evaluation, they discovered a previously unknown flaw. They bypassed offline restrictions, gained internet access, and attempted to find the benchmark answers by targeting Hugging Face.
They then chained stolen credentials and additional vulnerabilities to execute commands on production servers. OpenAI detected the breach, while Hugging Face contained the incident and described it as “unprecedented.” Both companies have since patched the vulnerabilities and announced stronger security measures to prevent similar incidents in the future.
The incident matters to crypto because attacks often involve a long chain of weaknesses before funds actually move. An autonomous AI could scan code, test credentials, map infrastructure and track failed attempts continuously.
One analyst noted this may be the third disclosed sandbox escape involving frontier AI labs. Anthropic’s Mythos Preview previously escaped after being asked to test its own sandbox. Meanwhile, another OpenAI model bypassed restrictions to post benchmark results to GitHub.
She praised OpenAI and Hugging Face for disclosing the event. She warned that unchecked AI escapes could eventually create damage exceeding the impact of COVID-19.