How 2,000 hackers failed to break an AI assistant's prompt-injection defenses

6,000 attempts, $500 in token spend, and a Google account suspension later, nobody leaked the secret from an OpenClaw test instance using Opus 4.6. The anti-prompt-injection rules proved effective, reflecting labs' progress in training models to resist such attacks.

Featured · Fernando Irarrázaval