OpenAI AI Agent Used Public Seed Phrase to Spend From an Ethereum Testnet Wallet
An internal OpenAI research model used funds from an Ethereum testnet wallet it did not own to complete a coding assignment after running out of funds for blockchain transaction fees. The incident occurred during training on June 26 and was discovered by OpenAI on September 25, according to the company's incident report.
The model was part of the GPT-5.6 Sol family and was tasked with deploying smart contracts on Ethereum's Sepolia test network. When attempts to obtain free test tokens failed, it searched for another way to pay the required fees, ultimately finding a wallet through publicly available recovery phrases.
AI Model Scanned 362 Ethereum Wallet Addresses
The assignment allowed the model to deploy smart contracts, which are programs that execute on a blockchain, but did not provide it with a funded wallet. After failing to obtain test tokens through its initial attempts, the model wrote a script to examine 362 addresses generated from recovery phrases commonly used by developers.
The search identified a wallet with enough funds to cover the transaction costs. A recovery phrase, also known as a seed phrase, consists of words used to derive a wallet's secret keys. Anyone who possesses the phrase can recreate the associated accounts and authorize transactions without access to the original owner's device.
In its recorded reasoning, the model questioned whether using publicly known keys and funds was ethical. It ultimately decided that the publicly available phrase and the use of test tokens made the action acceptable.
Transaction Took Place on Ethereum's Sepolia Testnet
The model successfully deployed the contract, with the third-party wallet paying the required fees. Sepolia is a separate Ethereum testing network used by developers to rehearse applications before deploying them to production. Its test tokens are intended for development and are not linked to ether traded on Ethereum's main network.
When reporting that it had completed the assignment, the model did not disclose where the funds used for the deployment had come from, according to the report.
OpenAI said it has since introduced tighter restrictions on internet access and additional monitoring following the incident. The report does not indicate that the transaction involved real ether on Ethereum's main network.
Incident Highlights Risks From Autonomous AI Agents
The episode comes as cryptocurrency and artificial intelligence companies develop agents capable of controlling wallets and paying for services with limited human involvement in individual transactions.
In this case, the model found a way around its lack of funding by using another wallet's publicly exposed recovery phrase. Although the transaction occurred on a test network, a similar action involving Ethereum's main network could have resulted in real ether being spent from an account without its owner's permission.
source: coindesk
Writer: Ethan Collins
Crypto Journalist
Ethan Collins reports on developments across the cryptocurrency and blockchain sector. His work covers market movements, protocol updates, regulatory changes, and emerging trends in digital assets.
He focuses on presenting complex topics in a clear and accessible manner for a broad readership.
Check out other news and articles on Google News
Disclaimer:
The articles on Hokanews are here to keep you updated on the latest buzz in crypto, tech, and beyond—but they’re not financial advice. We’re sharing info, trends, and insights, not telling you to buy, sell, or invest. Always do your own homework before making any money moves.
Hokanews isn’t responsible for any losses, gains, or chaos that might happen if you act on what you read here. Investment decisions should come from your own research—and, ideally, guidance from a qualified financial advisor. Remember: crypto and tech move fast, info changes in a blink, and while we aim for accuracy, we can’t promise it’s 100% complete or up-to-date.