OpenAI agent used known seed phrases to reach 362 wallets: old test wallets are the weak point

On October 15, 2026 OpenAI disclosed an incident that has been routine in the crypto world for years, except that this time it came from an AI model. An internal model needed money for a programming task, had none, worked through publicly known recovery phrases and ended up paying transaction fees out of a wallet it was not allowed to use. In the course of that it reached 362 addresses. The balance consisted of test tokens with no market value, and no financial loss resulted. If you hold your own keys, the news lies in the route rather than in the damage. The agent broke no encryption and exploited no flaw in a wallet. It used credentials that are lying around in public anyway.