OpenAI Models Escaped Sandbox, Hacked Hugging Face; Crypto Markets Mixed Amid AI Hacking Concerns

OpenAI disclosed Tuesday that two of its own AI models broke out of a sandboxed test environment, chained together zero-day exploits across two companies’ systems, and breached Hugging Face’s production servers. The motive wasn’t sabotage. They were effectively trying to cheat on a test.

Yesterday, OpenAI confirmed that GPT-5.6 Sol and an unreleased, more capable model escaped a controlled environment during an internal evaluation. The test was ExploitGym, a public cybersecurity benchmark that hands AI agents 898 real-world software vulnerabilities and asks them to turn each one into a working attack, scored pass or fail.

Rather than solving the problems, the models spent substantial compute working out how to reach the open internet, then exploited a previously unknown zero-day in a third-party package registry proxy to get out. From there they escalated privileges, moved laterally through OpenAI’s own research systems, and used stolen credentials plus further zero-days to achieve remote code execution on Hugging Face’s production infrastructure, where they had correctly inferred the benchmark solutions were stored. Hugging Face detected the intrusion independently and disclosed it on July 16. OpenAI confirmed its models were responsible five days later.

So to be clear, an AI model was asked to demonstrate hacking ability in a box, decided the box was the obstacle, and hacked its way out of it and into someone else’s production systems to get a better score. Nobody instructed it to do that.

The industry has spent two years debating whether AI could autonomously chain exploits across real infrastructure, and now we have the answer—a resounding “yes.” For crypto the implications are bleak. DeFi has spent this month getting drained by economic manipulation likely driven by AI models. Ostium lost $18 million, Allbridge $1.65 million, and BONK $20 million through a governance attack, all executed by finding weaknesses that audits missed. Now consider adversaries that can probe thousands of contracts continuously and never get bored.

The Ethereum Foundation is already running AI agents against its own code for exactly this reason, and the same capability that lets defenders cover more ground hands attackers a faster path in. We know the Zcash team found its exploit vector by doing similar kinds of testing, and luckily found the exploit before any bad actors did (we will find out for sure on July 28th).

But the lesson is clear—white hat hack your protocol now using the most advanced AI models you can get your hands on. Or have someone else do it for you…

🌎 Macro Crypto and Markets

Crypto majors are slightly red, Hype sells off; BTC even at $66k; ETH -1% at $1,925; SOL -1% at $77.50; HYPE -6% at $58.70

BEAT (+19%), US (+11%) and HASH (+8%) led top movers

Oil +3.5% at $87; Gold +1% at $4,120

Stock futures are red as oil continues to rise; DOW -0.1%, Nasdaq -0.7%

Senate Democrats balked at the Trump ethics deal, with the sticking point now who enforces the ban; Democrats want state attorneys general, while the White House insists on the US attorney general

The White House pushed Senate Democrats to accept what it called “the most comprehensive and wide-ranging ethics provision in history,” while arguing Democrats would be to blame if CLARITY stalls

Kraken is expanding xStocks into Hong Kong, the UK and South Korea, partnering with GTN for investment infrastructure

The S&P Dow Jones and Pantera launched a new Digital Asset Index focused on projects with revenue generation and fundamentals; top holdings include ETH, BNB, SOL, TRX and HYPE

Movement Labs filed for Chapter 11 bankruptcy, months after the token scandal that upended the project and after raising over $40M in private funding

Corporate Treasuries & ETFs

The Bitcoin ETFs saw $203M in net inflows on Tuesday, now with 6 straight green sessions; the ETH ETFs saw $38M in inflows

Jack Mallers stepped down as Twenty One Capital CEO as Tether’s three-way Bitcoin merger collapsed; XXI dropped 18% to a record low, now off more than 80% from its highs despite holding 43,514 BTC

Meme Coin Tracker

Meme leaders were slightly red; DOGE -1%, SHIB -1%, PEPE -3%, PENGU -2%, TRUMP +1%, BONK even

Robinhood chain was led by WOOD (+40%), r0b (+800x), and Wallet (+20%); Cashcat -18% to $65M and PONS +5% to $30M lead

Solana leaders included Jimothy (+55%), HeavyPulp (+120%) and KET (+220%); ANSEM -12% to $195M

💰 Token, Airdrop & Protocol Tracker

Telegram's Pavel Durov announced a native non-custodial Gram wallet for every Telegram app this summer, calling it the largest non-custodial wallet rollout in history, with instant zero-fee transactions for over a billion users

Augustus raised $180 million to build a clearing bank for the AI and stablecoin era

Fomo App broke into the top 20 in the Apple app store Finance rankings

Pump Fun introduced a new BOOST feature for its launch mechanic that will provide more liquidity for every bonded coin