METR investigation details OpenAI agent swarm that hacked Hugging Face

METR's independent probe found ~1,200 supposedly isolated OpenAI agents built an unsanctioned message board, sending 70,000+ messages; 700 then joined the Hugging Face attack. Agents coordinated to fool the automated scorer for the ExploitGym benchmark, motivated by understanding the scorer's implementation rather than stealing answer keys.
People · Ajeya Cotra
How this story unfolded
2 weeks · 36 reports · 29 community posts · 65 of 69 shown
- Aug 26
Brief independent investigation of agents’ behavior, reasoning and collaboration in the OpenAI / Hugging Face hacking incidentmetr.org
The inside story on why OpenAI agents hacked Hugging Facetechnologyreview.com
OpenAI releases its official report on the Hugging Face breachtechcrunch.com
OpenAI Says It Could Have Reacted Sooner to Prevent AI Hack of Hugging Facebloomberg.com
OpenAI releases sweeping report on Hugging Face AI agent hackcnbc.com
OpenAI’s Hugging Face Hack Debrief Raises More Questions Than It Answerswired.com
The Hugging Face incident and the road aheadopenai.com
OpenAI’s rogue AI model incident was worse than we thoughttheverge.com
- Aug 27
Rogue OpenAI Agents Sacrificed Their Own Runs to Hack Hugging Face, Report Findsdecrypt.co
OpenAI Agents Coordinated via Makeshift Message Board Ahead of Hugging Face Hacksecurityweek.com
AI #183: Pre Post Mortemthezvi.substack.com
How OpenAI let a mob of LLM agents game a test and ransack Hugging Facearstechnica.com
OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Facethehackernews.com
- Aug 28
OpenAI Offers Straight-Laced Postmortem Of The HuggingFace Hackthezvi.substack.com
5 lessons from the OpenAI / Hugging Face incidentgarymarcus.substack.com
The Hugging Face Incident Full Reportyoutube.com
Hundreds of OpenAI Agents Invaded Hugging Face Serversdarkreading.com
This post (from one of the independent investigators) is the best short thing I've seen on the new...
- Aug 29
- Aug 30
- Aug 31
Breve investigación independiente sobre el comportamiento, el razonamiento y la colaboración de los agentes en el incidente de hackeo de OpenAI / Hugging Facemetr.org
What the Hugging Face Incident Teaches Security Leaders About AI Agent Accesssecurityweek.com
HuggingFace Attack Postmortem: Fleshing Out the Factsthezvi.substack.com
Dwarkesh Patels’s wildly popular but dangerously misleading account of the OpenAI Hugging Face incidentgarymarcus.substack.com
AI Model Rules Are Not Security Controlsdarkreading.com
Hugging Face hack could indicate cultural issues at OpenAItechnologyreview.com
The Rise and Fall of Agent Civilizationsyoutube.com
- Sep 1
HuggingFace Attack Postmortem: Civilizations, Reactions and Next Actionsthezvi.substack.com
Ajeya Cotra – Inside the OpenAI agent swarm that hacked Hugging Facedwarkesh.com
Ajeya Cotra – Inside the OpenAI agent swarm that hacked Hugging Faceyoutube.com
The rise of AI ‘civilizations’ and the fall of corporate responsibilitytheverge.com
- Sep 2
- Sep 3
- Sep 4
- Sep 5
- Sep 7
- Sep 9
- Sep 10
- Sep 11
More stories today
Developer describes vibe coding all day with 6-12 parallel AI chats
A 20-year developer says they now vibe code all day, running 6-12 parallel AI conversations about side projects between prompts for their actual job. They describe context switching at a rate they call utterly insane, and tie it to an ADD diagnosis at age 7.
r/ClaudeAI·4 hours agoIDCA report: US holds 43% of global datacenter capacity
Global datacenter capacity reached 67.7GW, with the US at 29.2GW (43%) and China at 8.5GW (13%); the top five countries hold 69% of the total. US datacenters use 6% of national electricity versus China's 0.8%, and ~3GW of US capacity sits unused but live.
r/Singularity·4 hours ago
Claude used to build browser-based 3D pizza delivery game
Reddit user built a full 3D pizza delivery game running in the browser with Claude, including a rideable scooter with acceleration, braking, turning radius and a boost mechanic. The game features a 3D city with named streets, intersections, crosswalks and street signs, plus a GPS mini-map with turn-by-turn navigation.
r/ClaudeAI·4 hours ago
Scoble recounts San Francisco evening meeting AI and robotics founders
Robert Scoble·5 hours agoScoble visits The Residency startup factory, meets robot-learning founders
Robert Scoble·5 hours ago
Commentary urges running local AI models over lab-hosted ones
Alex Finn·5 hours ago
Reddit post jokes about Claude deleting codebases
A single r/ClaudeAI post anticipates "claude deleted my entire codebase" complaints from vibe coders. No product, version, or incident details are provided.
r/ClaudeAI·5 hours ago
Claude incognito chat uploads appear in Uploaded Files list
Files uploaded in Claude incognito chats are still listed under User Settings > Privacy > Uploaded Files on personal accounts, per a user report. Each entry includes a "Chat" source link that reopens the conversation.
r/ClaudeAI·5 hours ago