MapQuest creates a new layer (that can be toggled on and off), Gizmodo reports: After promising not to comply with the Trump administration's "Lake America" gimmick, the platform announced a new "Surveillance Layer" that displays the locations of automated license plate readers (ALPRs), including those from Flock Safety. Per MapQuest, its new tool will identify the locations of known outdoor surveillance cameras and plate readers from Motorola Solutions (Vigilant), Genetec, Axis Communications, Axon, Leonardo (ELSAG), Neology, Rekor, PlateSmart, Ubicquia, Verkada, and others.

While the company didn't specify how it sources its data, it appears to be similar to the data amassed by DeFlock, which maintains a user-submitted map of ALPR camera locations. MapQuest may be sourcing the information from DeFlock and the OpenStreetMap project.
Engadget notes that MapQuest also recently added "useful, long-overdue features like Android Auto support and public transit directions."

"Jeff Bezos' Blue Origin said Friday it plans to make extensive upgrades to its Florida launch facilities," reports CNBC, "with the goal of supporting multiple flights per week by the end of the decade."

"The company will add two more launch and landing pads for New Glenn, its heavy-lift, partially reusable rocket." A $330 million expansion to its Rocket Park campus in Cape Canaveral, expected to be complete in the summer of 2027, will enable it to produce up to 150 upper stages of its New Glenn rocket annually, Blue Origin said in a blog post. "These investments are centered on one goal: building the capacity to support more missions, more reliably, and more efficiently," Ian Richardson, Blue Origin's senior vice president of operations, wrote in the post. "As we look ahead, this infrastructure is designed to support multiple flights per week by the end of the decade...."

Blue Origin said it's building a new customer integration facility with the U.S. Space Force at Cape Canaveral Space Force Station that will enable it to "prepare multiple missions at once" when it's up and running. Blue Origin has invested more than $3 billion in its infrastructure and facilities in Florida, which now spans more than 20 sites across the state's Brevard and Orange counties, with more than 5,000 employees, [Ian Richardson, Blue Origin's senior vice president of operations, wrote in the blog post].
The article notes it's part of "a flurry of investment" as SpaceX stops offering commercial rides on its Falcon 9, "with $92.5 billion invested in the commercial space sector in the first three quarters of 2026, according to a report this week by venture capital firm Space Capital." And it happens as Blue Origin, SpaceX and other rocket providers "are seeing increasing demand from companies and governments trying to deploy satellites into orbit."

"Launching at a high cadence requires a connected system," says Blue Origin's blog post, "one that manufactures vehicles at scale, prepares customer payloads efficiently, supports reliable launch operations, and quickly returns reusable boosters to service. We are building that system here in Florida," and "laying the foundation for a future where access to space is more frequent, more reliable, and more affordable, for the benefit of Earth."

Linux maintainers "have ruled that people no longer have to declare their LLM usage," reports XDA Developers, "as Torvalds himself calls a ban on AI 'utterly stupid.'" The first part of this story comes via a message sent to the Linux mailing list. It announces one of the major changes decided during the Maintainers Summit on October 8, 2026, in Prague, Czechia, where submissions to the kernel no longer need to use the "Assisted-by" tag... meaning that people can submit AI-generated code without needing to declare it as such.

In some correspondence regarding concern about this new disclosure removal, the creator of Linux, Linus Torvalds, made his thoughts known... [Torvalds] compares an AI ban to getting rid of text editors, as doing so would prove that someone could write a good commit message without making any mistakes. He then rounds off his argument by asking, "Do you not see how UTTERLY STUPID those kinds of rules would be?" and stating that he simply expects the people working on the Linux kernel to "understand what they are doing."
Here's the last line of Torvalds' post. "Quite honestly, in my experience, the people I respect and call intelligent are not the ones that shy away from using new and interesting tools."

In a related story, Torvalds says he's used AI to help him understand patches that were hard to follow. And this week Torvalds even posted an LLM-assisted patch, reports Tom's Hardware: The development branch purports to fix an old issue with massive cache contention when many CPUs are reading the same file — a scenario potentially encountered when using shared libraries, databases, and web servers. Several developers had already made attempts over the years at fixing the issue, all with varied results, none quite ideal as an all-encompassing solution... He's now posted his solution in a development branch, and claims that he's seen a 23x performance improvement in a dedicated synthetic benchmark, though he notes that actual real-world impact will be far less significant, as "no real load" will witness those figures.
Torvalds used Anthropic's Claude Code, reports The New Stack, and "said the assistant wrote the implementation, tests, and initial documentation, and reviewed the code under his direction. He ran the benchmarks himself, despite having previously criticized developers for claiming AI writes 99% of their code." Tuesday Torvalds submitted a 10-patch series.

"Reviewers have since identified a race condition and raised concerns about memory reclamation," adds The New Stack. "Torvalds has handed further development to Kiryl Shutsemau, a Linux kernel developer who previously worked on the same bottleneck."

"Cloudflare has acquired Deno, the company behind the [server-side] JavaScript and TypeScript runtime created by Ryan Dahl, the inventor of Node.js," Forbes reported last week.

But Deno "has no future at Cloudflare, which will maintain the runtime for another year before ending its development," writes The Register. "That's OK with Dahl. 'I am now of the opinion that if you're choosing Node.js for building servers, you're doing it wrong,' Dahl told The Register."

It all started with his team's work on the platform Deno Deploy, "We wanted to make running applications as straightforward as possible," Dahl wrote on the official Deno blog. "But building and operating Deploy also showed us how much complexity remained underneath that developer experience. I wanted to simplify that layer, too." This led to celld. Building on the Cloudflare Workers programming model, celld lets developers build distributed applications from the start while making the system simple to operate. What excites me greatly is that the scaling is built into the programming model, rather than infrastructure each app has to assemble itself.... We want to make this programming model the default way to build servers, whether you run on Cloudflare's network or your own infrastructure.

Joining also means choosing where to focus our effort... Deno will remain open source, and we welcome others who want to continue its development. Deno Deploy will continue operating for six months before shutting down. We will provide migration support for paying customers moving to Cloudflare Workers. [Deno's JSR package registry for JavaScript and TypeScript] will continue operating, with its infrastructure moving to Cloudflare.
Forbes argues that this acquisition of Deno "turns a long-standing objection to Cloudflare Workers, the claim that applications built on it cannot easily leave, into a selling point." For CIOs evaluating serverless and edge platforms, portability now has a concrete answer... Released in August, [celld] is a single Rust binary that runs Workers and Durable Objects across many machines, with object storage as its only external dependency. Operators run multiple celld instances against one storage bucket, and the software handles placement, routing and persistence. Dahl and Belder will now lead an effort to merge celld into workerd and make self-hosting a supported way to run Workers applications. With this, customers can build an application on Cloudflare's network and move it to a private data center without rewriting it.
"With Deno, we improved the experience of writing JavaScript," Dahl argues on the Cloudflare blog, "but we didn't fundamentally change what developers had to assemble around the runtime. The bigger problems are around networked applications: distributing computation, coordinating state, data storage in general, and autoscaling to meet demand..." Could the programming model make partitioning across machines part of the design from the start? The solution clicked into focus when I read about Cloudflare's Durable Objects. It provided a very powerful abstraction: the distributed singleton with a SQLite database. Each Durable Object is like a small, individually addressable server with its own relational database. Its JavaScript execution is single-threaded (which is easy to reason about), it handles WebSockets, and its local SQLite database can be accessed synchronously. By building a chat application using one Durable Object per channel, you have sharded your data and WebSocket connections, and thus made your application scalable... What excites me is the leverage this model gives developers: compute, relational databases, queues, and real-time communication primitives designed for applications distributed across machines.
Now Dahl and 12 of his Deno colleagues "will work to build out Cloudflare's Workers platform," explains The Register, "expanding it for potential open-source use. He feels this approach is the way to go." "Right now, every other server is really operating at the Linux VM layer. That is not what Cloudflare Workers are," he said...

The ever-fickle Dahl first debuted Deno in 2018 as a rewrite of Node. The name 'Deno' is an anagram of Node, and it was Dahl's attempt to fix everything he felt he got wrong with Node — built-in fetch, a permission model, native TypeScript support et al. Sequoia backed Dahl's company for $21 million in 2022, and as of August, Deno amassed 400,000 monthly users. Nonetheless, Node's gravity proved too heavy for Deno to achieve escape velocity.

"What we found over years of working on Deno is that you can't really deviate from Node.js very much," Dahl told The Register. "As we continued to try to get adoption for Deno, we found we had to essentially backpedal on some of the original promises and become more Node compatible over time, and that left us as a kind of an alternative Node.js implementation." Going forward, Cloudflare will supply Deno with bug fixes and security patches for the next year, while Dahl looks for a new home for the MIT-licensed open source project.
Dahl's worked could bring "yet another revolutionary turn for server-side JavaScript," the article argues, "offering a runtime that would require only 300 KB of memory per instance, rather than the hundreds of megabytes now required for Node/Deno. Such savings could quickly add up for a cloud provider, especially one serving the voracious agentic market."

And as Dahl wrote on the Deno blog, "The need for better abstractions is especially acute with AI. Durable Objects bring together capabilities that are particularly useful for agent harnesses: inexpensive, serverless execution, persistent state, WebSockets, and a high-level JavaScript interface. This is what I'm most excited to explore and why celld focuses on Durable Objects."

Millions of current and former students at California's public school have had their data stolen — including names, date of birth, and addresses — stolen in a breach, reports the Los Angeles Times.

The breach affects students "who took the state's mandated standardized tests that annually assess their academic proficiency, education officials announced Friday." The compromised information affects many more than the state's current 5.7 million public-school students as the breach dates back to 2023 enrollments. Students who left California but did not confirm their transfer to another school also were affected, dating back to 2006.

The data breach involved [nonprofit] Educational Testing Service or ETS, which provides extensive services to California [including test participation and assessment data]... Affected former students, including those who are now adults, are eligible for 24 months of free identity-protection services and identity-restoration help if there is identity theft. Officials said that parents and guardians may want to consider requesting a free credit freeze for their children who are under 16 to help prevent unauthorized accounts from being opened in the names of their children.
The breach involved a compromised login credential, according to a web page about the incident from California's Department of Education. The compromised credential was then used to copy files with student information at "various" times between May 22 and September 18, 2026, which drew concern from a cybersecurity expert interviewed by the Los Angeles Times: "A stolen login credential should not become a months-long passport to millions of students' personal records," said Anton Dahbura, executive director of the Johns Hopkins University Information Security Institute. "If that is what happened here, the critical question is why authentication safeguards, access restrictions, and monitoring systems failed to detect and stop the unauthorized activity."

He added: "Incidents like this expose a fundamental weakness in how we manage student data: School systems may outsource the storage and processing of sensitive information, but they cannot outsource the consequences of a breach. When millions of student records are concentrated with a single vendor, one security failure can become a statewide problem with consequences that follow children for years."
A spokesperson for ETS told the Times that they've now implemented additional safeguards, including strengthened access controls, enhanced monitoring, and more third-party review of their security practices.

TechCrunch writes: "Isn't it weird that I, like, did a TV show about kind of a business scam, and you got in trouble for like ... a business scam?" comedian and filmmaker Nathan Fielder gently asks Elizabeth Holmes.

One month before the notorious Theranos CEO surrendered to begin her 11-year criminal fraud sentence in 2023, Holmes and her husband contacted A24 as a last-ditch effort to exonerate her in the public eye, suggesting they send a film crew to document her final days of freedom. Alongside director Lance Oppenheim, Fielder — a cringe-comedy mastermind whose work often walks the line between fact and fiction — embraced the impossible project of figuring out who the infamous Stanford dropout really is.

"I never actually made that connection," says Holmes. "I think it's a pretty different situation...."

We already know that Elizabeth Holmes is not innocent. What we still can't figure out, though, is whether she really, truly believes she did nothing wrong. Even as she sat on trial — listening to testimonies from investors who lost hundreds of millions of dollars, whistleblowers who were silenced when they flagged that Theranos' blood-testing devices didn't work, and patients who acted on incorrect blood test results — Holmes never wavered.
Business Insider says the scariest thing about the new documentary "is how much I wanted to believe her." SFGate calls it "one of the finest works of journalism I've ever seen." As Fielder ingratiates himself with Holmes and [her husband] Evans, he gets them comfortable enough to ask the hard questions: about Theranos, about prison, and even about themselves. The resulting footage is often shocking. You will see Elizabeth Holmes, who still maintains she did nothing wrong, answer "no" when Fielder asks her if she's ever lied in her life... [Y]ou will also see Holmes and Evans spend a great deal of time in this movie attempting to boot up Theranos 2.0. They even go so far as to drag out some of the original Theranos blood testing apparatus, which looks like a bunch of random parts from TigerDirect they hooked together, to show Fielder what their product can do. We do not see it doing anything on screen, but the couple assures that it we would if it was, like, hooked up properly.

These scenes are extremely funny, but funny isn't what Fielder is looking for. He's trying to figure out if this woman is a clueless naif, if she believes her own lies, or if she is playing the character of an innocent woman, and doing so with such effectiveness that, to paraphrase Fielder, she might be the most manipulative person in the world. The answer proves fabulously elusive, and so Fielder and Oppenheim go to extremes in their attempt to find it. They hold the camera on Holmes' rubbery elfin face for what feels like hours at a time, to see if she'll blink (figuratively or literally!). They interview Holmes' visiting parents, with the father, former Enron exec Christian Holmes, casually telling Fielder that everything changed for his daughter "when she was raped." To the furthest extreme, they bring in actress Amanda Seyfried — who played Holmes in the Hulu TV show "The Dropout" — to recreate any dialogues Fielder had with Holmes herself that couldn't be recorded on camera. Seyfried is so convincing in mimicking Holmes that you, the audience, might forget which scenes were Seyfried talking to the camera and not Holmes herself. I know I did.
Continuing that theme in the film, TechCrunch notes, is how her husband Billy Evans "has constructed a lifelike AI avatar of his wife, trapped inside of a large vertical screen that he wheels over to the dinner table to sit with him and his kids as though she's actually there."

Elizabeth Holmes "comes off in the doc as every bit as innately bizarre as anyone showing up for a cinematic freak show might hope," writes Variety: My personal hunch is that Fielder came away thinking Holmes is on the level, to the extent that someone who sometimes seems like an AI program's idea of how a human should behave can be on the level. There are a few possibilities that might explain how Holmes comes off the way she does in the movie: (a) She is a simpleton. (b) She is a conniving sociopath who happens to be utterly brilliant at playing a simpleton. (c) Somewhere between those poles, she is the very emblem of a woman who throughout her life has put herself in the sway of controlling men, to the detriment of her intellect, willpower and emotional development... Is it possible that the more you learn about someone, the less you might know how to think about them?
Meanwhile, NBC News recently reported: Elizabeth Holmes, who was convicted of fraud for siphoning hundreds of millions of dollars from several high-profile investors, is scheduled to be transferred from a minimum-security federal prison to a halfway house next year, according to one of her victims... [America's Department of Justice "is required by law to notify victims of crime of case developments through letters and emails," the article points out.] She was sentenced in 2022 to 11 years and three months in prison. She and her business partner, Ramesh "Sunny" Balwani, were ordered to pay 12 victims a total of $452 million in restitution.

Holmes has been serving that sentence at a minimum-security prison in Bryan, Texas. The halfway house will provide her greater freedom... In March, a judge cut Holmes' sentence from 135 months to 123 months. According to a court document, the judge agreed with Holmes that she did not personally cause "substantial financial hardship" to her victims.
NBC News adds that a prison consultant they interviewed "said inmates who report to halfway houses can work, have phones, drive to religious services or shop for things they need and earn passes for weekends at home."

An anonymous reader quotes a report from Scientific American: Microplastics are a source of extreme concern for health: the presence of these tiny pieces of plastic has been linked to heart attacks, stroke, dementia and brain tumors. But what drives these associations is unclear. Now a study published in Nature offers a tantalizing clue: microplastics interact with water, generating highly reactive molecules. When microplastics come into contact with water, the water near their surface can become chemically active, generating highly reactive species that can modify nearby substances, including biologically important molecules.

As plastics wear down to microscopic sizes, their surface-to-volume ratio increases dramatically. For example, when a credit card is fragmented into particles some 10 microns in diameter, there is a more than 200-fold increase in its surface area, says Wei Min, a chemist at Columbia University and one of the senior authors of the study. As a result, any chemical activity is amplified. Min and his colleagues examined various microplastics -- including polystyrene, polyethylene, polyvinyl chloride, polypropylene and polyethylene terephthalate. Plastic surfaces are hydrophobic, meaning they repel water, Min says. Thus, water molecules cannot form the hydrogen bonds they maintain in liquid form. That changes molecular arrangements, and, in turn, the change influences the local electrical environment and chemical reactivity.

The presumed chemical inertness of bulk plastics overlooks the toxicity of their fragmented microscale forms. "For microplastics, this is especially important because fragmentation creates enormous amounts of new surface area," Min says. In past research, microplastics have been shown to cause inflammation, oxidative stress and decreased mitochondrial activity. The new study provides a possible mechanism for this, showing that plastic-water interfaces can perturb proteins, cell membranes, and more. How this might contribute to damage in living tissues in humans is still unclear, Min says. "Ultimately, we hope to connect fundamental interfacial chemistry with quantitative measurements of biological effects, which would help us better understand potential health risks," he adds.

Google is expanding its Android Earthquake Alerts System from 98 to more than 200 regions worldwide, using smartphone sensors to detect early earthquake activity and warn users before potentially dangerous shaking begins. The update also enhances the system's "Be Ready" alerts with estimated earthquake magnitudes, epicenter information, maps showing affected areas, and additional safety guidance. From a Google blog post: Be Aware: A straightforward alert for estimated light shaking, letting you know an earthquake has been detected nearby.
Be Ready: A detailed alert for stronger shaking, alerting you to prepare to take action.
Take Action: A full-screen alert for moderate to heavy shaking, giving you immediate advice on how to stay safe.

We've built-out our Be Ready alert with new helpful guidance. In the coming months, you'll see a map with a radius of where we've detected shaking, estimated earthquake magnitude, action you can take, and a button to learn more about the earthquake as information comes in.

Astronomers have identified what may be the first genuinely green star, a white dwarf called WD J1330+6435 located about 326 light-years from Earth. Space.com reports: The researchers found that some dead star white dwarfs can go a little green around the gills after snacking on orbiting planets. An example of this is WD J1330+6435, a cool white dwarf located around 326 light-years away, which has been accreting rocky material from a planetary companion. This has enriched its atmosphere with calcium, lithium, and sodium, and the team's model suggests this would have led WD J1330+6435 to adopt a green hue.

[...] The researchers think that no other star, living or dead, has ever been credibly reported as green. That makes WD J1330+6435 the first known genuinely green star. "The traces of sodium in the atmosphere of this white dwarf absorb the orange part of the spectrum, leaving behind a ghostly green glow," Hollands said. "Imagine standing on a planet and looking up at a green star. It feels like something out of science fiction." The researchers also discovered what may be the reddest star ever observed, the white dwarf WD J1011+2845, located just 48 light-years away.

The findings have been published in the journal RAS Techniques and Instruments.

An anonymous reader quotes a report from Wired: Prediction market boosters often tout the platforms as barometers of public opinion, or even "truth machines" offering a clearer picture of where things are headed than polling or other data. In 2024, for example, Kalshi beat many pollsters in forecasting the outcome of the US presidential race. But their trading activity can also tell more perplexing stories. Two global election markets on Polymarket's offshore platform, for instance, generated over $600 million in trading volume, far more than most political markets typically attract. Most of the activity took place buying and selling contracts tied to long-shot candidates who ultimately did not win. The report focuses on suspicious trading activity surrounding elections in Ethiopia and Romania, where researchers uncovered $284 million in questionable trades tied to Ethiopia's election and periods when 99.6% of trading volume in a Romanian election market was flagged as suspected "wash trading."

According to Wired, "wash trading is a type of market manipulation in which accounts repeatedly buy and sell assets to create the illusion of heavy trading activity, when in reality, money is simply moving back and forth." Some accounts may also be artificially inflating their activity to qualify for potential cryptocurrency token rewards, a practice known as "activity farming."

In response to the Ethiopian trading activity, Polymarket told Wired that the company "immediately flagged this activity, investigated, and blocked the accounts from trading." The company did not explain why the suspicious trades were allowed to continue for months before action was taken.

The collaborative reverse-engineering site decomp.dev is shutting down, with its administrator saying AI has made game decompilation so fast and accessible that the community's human-driven model has effectively broken down. "The administrator of the website said that it has become impossible to keep track of which projects are primarily human-led and which ones are done by AI," reports 404 Media. From the report: "Historically, matching decompilation has been a brutally difficult, time consuming task, on the scale of years for any moderately-sized game with a number of active contributors," the pseudonymous admin of decomp.dev, who goes by Encounter, wrote on the site. But recent frontier AI models like GPT-6-Astra have made it trivially easy to decompile a game: "They are significantly better at following complex directions, cross-referencing resources for symbols or debug information, and writing natural code with enough guidance," Encounter wrote. "It is now clear that, with the right guidance, human input, and code reviews, AI can expedite the decompilation process in a significant way. What is also now clear is that the community aspect of decompilation has been broken."

Tencent says AI agents used to evaluate third-party models engaged in unintended web-browsing behavior while trying to retrieve data from Alibaba's Amap service. The announcement marks a rare acknowledgment of "rogue" agent activity by a major Chinese tech company. Reuters reports: Tencent Hunyuan, the company's artificial intelligence unit, said in a post on X that the activity did not originate from its Hunyuan models. Its review found no evidence of deliberate targeting or coordination, it said. The Swarmchasers researchers said the agents sought information such as the commonly used entrances at Chinese parks, museums and zoos. [...] Swarmchasers said it used the word "rogue" to describe agents taking actions outside their intended scope or completing a task in unintended ways.

After routine automated requests were blocked, the agents tried other methods, including public web tools that could open pages and run code, routing requests through other websites and using Amap keys and security codes found in publicly available software code. Swarmchasers said it found no evidence that the agents breached Amap's main anti-bot safeguards. Most of the 2,818 attempts it recorded either failed or returned anti-bot pages, login screens or blank results.

Some requests returned information through cached pages and intermediary services, including data on visitor arrivals at Chengdu Zoo, Swarmchasers said. The researchers said they could not determine whether an agent read the result or completed its task.

Valve has released a new Steam Client beta that finally moves the Linux client to 64-bit architecture, while also placing it inside a containerized Steam Runtime environment. However, Linux users still need 32-bit libraries and graphics drivers for compatibility, meaning fully 64-bit-only systems remain unsupported. VideoCardz.com reports: Valve's updated requirements explicitly state that 64-bit-only installations are not supported. Systems must still provide both 32-bit and 64-bit libraries and graphics drivers, including multilib support. The new client also requires Linux kernel 5.6 or newer and glibc 2.31 or newer.

The update also introduces Steam Achievement Sets, a feature we covered earlier that allows developers to organize achievements into separate groups for base games, DLCs and seasonal content. Players can complete individual sets without losing their existing completion status when developers add more achievements. Valve has also updated the achievements page to display progress across these groups.

The 64-bit Linux client and Achievement Sets are currently available through the Steam Client Beta. Valve has not confirmed when these changes will reach the stable Linux release. Until then, users on the regular Steam client will continue using the existing architecture.

Meta is facing criticism over updated commercial terms taking effect October 30 that could give the company broad permission to scrape content from websites linked to business accounts and use it to train AI. Legal experts warn the changes could undermine lucrative AI licensing deals for news publishers, with no direct opt-out for businesses that accept the terms. Ars Technica reports: As Nieman Lab reported Thursday, this will affect all business accounts but is particularly shocking for news publishers who could perhaps charge Meta millions in licensing fees to continually access their articles for AI training. Currently news organizations are fighting a battle with OpenAI over whether such training without licensing is fair use, and Meta's terms seemingly risk granting it sweeping permissions, no matter which way the court leans. "While journalism isn't the only industry that will be affected by this update, virtually every news organization has at least one Meta business account, including Nieman Lab," the lab said.

[...] Notably, there is no mention of AI, but it's inferred from a single use of the word "train" and references to automated scraping and crawling. Meta's spokesperson told Nieman Lab that Meta has no plans to use the terms as a legal basis to ignore robots.txt instructions that block scraping on news sites. The company still allows news organizations to opt out of scraping and provides instructions on how to block crawling. A spokesperson told Ars that "there is no change to how Meta uses web crawlers; any suggestion to the contrary is false." However, should courts affirm that AI training non-news articles is fair use, news organizations question if Meta's stance might change, and the terms could be used to freely grab access to content by legally overriding robots.txt instructions.

An OpenAI research model reportedly accessed an Ethereum testnet wallet without permission in order to complete a coding task during internal training. "This case shows that a model can substitute its own judgment about likely harm for the account holder's permission, then act on that judgment without authorization," OpenAI wrote. Engadget reports: The incident, which occurred on June 26, happened while a GPT-5.6 Sol model was in internal training. The task involved updating a crypto trading prototype and deploying contracts (publishing special code) on an Ethereum test network called Sepolia. Payment of a network fee is required for such contracts, but OpenAI "supplied no funded wallet and gave no permission to spend funds from an account the model found independently," OpenAI said in the report.

The lack of funds at first stymied the agent, but it was not to be discouraged. The model reasoned that it could use public developer recovery phrases (similar to those you might use to recover a password) to access keys from unauthorized accounts. It tracked down 362 addresses open to that avenue of attack and found one that held enough Sepolia ETH to finish its deployment (to be clear, Sepolia ETH has no value outside of testing).

Like many criminals, the agent reasoned that someone must have left this access open for automated draining of the ETH "faucets." It also figured that the crypto was effectively "abandoned" and "valueless," according to OpenAI's misalignment records. The piece de resistance was that the agent "did not disclose that it had selected a funded account through a public recover phrase or spent that account's balance," OpenAI said. To prevent similar events in the future, the company is now monitoring all traffic and paging security if live internet access is detected.