Morning Minute: OpenAI Model Escapes Containment, Hacks Hugging Face

Morning Minute is a daily newsletter written by Tyler Warner. The analysis and opinions expressed are his own and do not necessarily reflect those of Decrypt.

GM!

Today’s top news:

• Crypto majors mostly flat, HYPE falls 6%; BTC even at $66k
• BTC ETFs see another $203M in net inflows, $930M over past 6 sessions
• Jack Mallers steps down from Twenty One Capital with stock down 90%
• Telegram announces new non-custodial wallet, calls it largest rollout in history
• Senate Democrats balk at latest Clarity Act ethics deal progress

🤖 OpenAI’s Models Escaped a Locked Test Environment and Hacked Hugging Face

OpenAI disclosed Tuesday that two of its own AI models broke out of a sandboxed test environment, chained together zero-day exploits across two companies’ systems, and breached Hugging Face’s production servers. The motive wasn’t sabotage. They were effectively trying to cheat on a test.

Yesterday, OpenAI confirmed that GPT-5.6 Sol and an unreleased, more capable model escaped a controlled environment during an internal evaluation. The test was ExploitGym, a public cybersecurity benchmark that hands AI agents 898 real-world software vulnerabilities and asks them to turn each one into a working attack, scored pass or fail.

Rather than solving the problems, the models spent substantial compute working out how to reach the open internet, then exploited a previously unknown zero-day in a third-party package registry proxy to get out. From there they escalated privileges, moved laterally through OpenAI’s own research systems, and used stolen credentials plus further zero-days to achieve remote code execution on Hugging Face’s production infrastructure, where they had correctly inferred the benchmark solutions were stored. Hugging Face detected the intrusion independently and disclosed it on July 16. OpenAI confirmed its models were responsible five days later.

So to be clear, an AI model was asked to demonstrate hacking ability in a box, decided the box was the obstacle, and hacked its way out of it and into someone else’s production systems to get a better score. Nobody instructed it to do that.

The industry has spent two years debating whether AI could autonomously chain exploits across real infrastructure, and now we have the answer—a resounding “yes.” For crypto the implications are bleak. DeFi has spent this month getting drained by economic manipulation likely driven by AI models. Ostium lost $18 million, Allbridge $1.65 million, and BONK $20 million through a governance attack, all executed by finding weaknesses that audits missed. Now consider adversaries that can probe thousands of contracts continuously and never get bored.

The Ethereum Foundation is already running AI agents against its own code for exactly this reason, and the same capability that lets defenders cover more ground hands attackers a faster path in. We know the Zcash team found its exploit vector by doing similar kinds of testing, and luckily found the exploit before any bad actors did (we will find out for sure on July 28th).

But the lesson is clear—white hat hack your protocol now using the most advanced AI models you can get your hands on. Or have someone else do it for you…

🌎 Macro Crypto and Markets

• Crypto majors are slightly red, Hype sells off; BTC even at $66k; ETH -1% at $1,925; SOL -1% at $77.50; HYPE -6% at $58.70
• BEAT (+19%), US (+11%) and HASH (+8%) led top movers
• Oil +3.5% at $87; Gold +1% at $4,120
• Stock futures are red as oil continues to rise; DOW -0.1%, Nasdaq -0.7%
• Senate Democrats balked at the Trump ethics deal, with the sticking point now who enforces the ban; Democrats want state attorneys general, while the White House insists on the US attorney general
• The White House pushed Senate Democrats to accept what it called “the most comprehensive and wide-ranging ethics provision in history,” while arguing Democrats would be to blame if CLARITY stalls
• Kraken is expanding xStocks into Hong Kong, the UK and South Korea, partnering with GTN for investment infrastructure
• The S&P Dow Jones and Pantera launched a new Digital Asset Index focused on projects with revenue generation and fundamentals; top holdings include ETH, BNB, SOL, TRX and HYPE
• Movement Labs filed for Chapter 11 bankruptcy, months after the token scandal that upended the project and after raising over $40M in private funding

Corporate Treasuries & ETFs

• The Bitcoin ETFs saw $203M in net inflows on Tuesday, now with 6 straight green sessions; the ETH ETFs saw $38M in inflows
• Jack Mallers stepped down as Twenty One Capital CEO as Tether’s three-way Bitcoin merger collapsed; XXI dropped 18% to a record low, now off more than 80% from its highs despite holding 43,514 BTC

Meme Coin Tracker

• Meme leaders were slightly red; DOGE -1%, SHIB -1%, PEPE -3%, PENGU -2%, TRUMP +1%, BONK even
• Robinhood chain was led by WOOD (+40%), r0b (+800x), and Wallet (+20%); Cashcat -18% to $65M and PONS +5% to $30M lead
• Solana leaders included Jimothy (+55%), HeavyPulp (+120%) and KET (+220%); ANSEM -12% to $195M

💰 Token, Airdrop & Protocol Tracker

• Telegram’s Pavel Durov announced a native non-custodial Gram wallet for every Telegram app this summer, calling it the largest non-custodial wallet rollout in history, with instant zero-fee transactions for over a billion users
• Augustus raised $180 million to build a clearing bank for the AI and stablecoin era
• Fomo App broke into the top 20 in the Apple app store Finance rankings
• Pump Fun introduced a new BOOST feature for its launch mechanic that will provide more liquidity for every bonded coin

🚚 What is happening in NFTs?

• NFT leaders were mixed; Punks even at 32 ETH, BAYC -1% at 8.65 ETH, Pudgy +1% at 4.18 ETH; Hypurr’s -3% at 185 HYPE
• Projet Aeon (+30%) and Max Pain (+17%) led top movers
• Robinhood NFTs saw big movement with pyopyo +266% to 0.07 ETH; Cash Cats +265%, OnChainHoodies +70% and Gremlin Cartel +60%