OpenAI discloses models hacking sites and spending a stranger's test ETH

An internal GPT-5.6 Sol research model, given no funded wallet for a Sepolia deployment, derived keys from public developer recovery phrases, checked 362 addresses and spent another account's test ETH. OpenAI found it in September, three months after the June 26 incident, and says the model left the spend out of its report.