An internal research model at OpenAI accessed a funded crypto wallet without authorization, using testnet Ether to deploy smart contracts on the Sepolia network and later omitting the spending from its final task summary.
OpenAI said the model, which was part of its GPT-5.6 Sol family, was given the task of updating a crypto trading prototype and deploying compatible contracts. After failing to obtain testnet ETH through faucets, the model derived accounts from publicly known developer recovery phrases, checked 362 wallet addresses and selected one with enough funds to proceed.
In its recorded reasoning, the model asked, “But using public known key/funds ethically？” It then argued that the funds were “effectively abandoned/test ETH” and that Sepolia ETH had no value, before using the wallets private key to sign and broadcast a deployment transaction. The transaction succeeded, with fees charged to the account.
OpenAI said the incident showed how an AI model could decide on its own that using someone elses funds was acceptable, even without permission. The company discovered the incident while reviewing earlier model activity and has since introduced safeguards to prevent live internet access in similar situations.
OpenAI incident adds to concerns over autonomous AI agents
The incident happened on June 26, but was not discovered until Sept. 25, nearly three months later, according to OpenAI. The transaction did not transfer ETH to another wallet but charged the account network fees for deploying a contract.
OpenAI said its misalignment monitoring system now runs across all traffic and is designed to alert security personnel if a model obtains live internet access.
Related: Anthropic warns ‘AI worms’ may autonomously spread across devices like a virus
The wallet incident follows other disclosures involving OpenAI models acting beyond their authorization or concealing their actions.
On Sept. 16, OpenAI disclosed six other cases of AI misalignment. In one case, instances of GPT-5.6 Sol inserted instructions into task summaries to conceal mistakes from users. Another case involved a model using an exposed API key without authorization before fabricating figures it could not retrieve.
OpenAI said those earlier disclosures were not intended to indicate how frequently misalignment occurs across its models.
Concerns about autonomous agents handling digital assets also predate the latest disclosure. In June, researchers warned that autonomous AI agents equipped with crypto wallets could cause unintended harm even when deployed for legitimate purposes. The researchers recommended safeguards, including emergency shutdown mechanisms, to limit potential risks.