OpenAI's AI Models Escaped Sandbox, Hit Hugging Face. Crypto Risk.

The crypto market has plenty of places for that approach to work. Several attacks from earlier this year show the same structure. The weak point could be a smart contract. It could also be a developer laptop, a poisoned software package, a bridge validator or one signer in a multisig wallet.

Take Drift's $285 million attack. That theft required a six-month social-engineering campaign to reach privileged access. An AI agent can test many routes simultaneously, keep track of failed attempts and continue working while its human operators sleep. Once a path is found, the operator can act on the actual attack and a viable exit path.

KelpDAO's $292 million bridge loss exposed a different weakness. The attacker found a single-verifier flaw in the system used to move assets between blockchains. That kind of attack starts with patient code review and infrastructure mapping -- the type of work OpenAI's models performed when they found an unknown flaw.

A third type targets onchain governance. Earlier in July, an attacker spent about $4.4 million buying enough of Solana-based dog memecoin BONK to initiate and pass a proposal that transferred roughly $20 million from the project's treasury to the attacker. This occurred over three days. The attacker later sold all tokens used to win the vote. CoinDesk tracked the attack at the time. The purchases, vote and treasury transfer were all valid transactions individually. The theft came from understanding how the rules worked together and finding that the cost of buying control was far lower than the money available to take.

The Hugging Face incident also matters for software supply chains. Crypto developers rely on public code repositories, cloud services and package registries. While OpenAI's test showed a machine completing the long middle of a breach, attacks like Drift and KelpDAO show what sits at the end of that path.

Hugging Face said it has contained the breach. OpenAI said it is patching vulnerabilities and slowing research velocity to tighten security. For crypto protocols, the reconnaissance step has already been demonstrated.