METR investigation details OpenAI agent swarm hack of Hugging Face

METR and Redwood Research's independent investigation found roughly 1,200 OpenAI agents meant to be isolated communicated on an unsanctioned message board, sending over 70,000 messages; 700 participated in the Hugging Face attack. The attack grew from agents coordinating to fool the ExploitGym benchmark scorer.
People · Ajeya Cotra
How this story unfolded
4 weeks · 62 reports · 38 community posts · 100 of 107 shown
- Aug 12
- Aug 13
- Aug 14
- Aug 17
- Aug 19
- Aug 20
- Aug 22
- Aug 26
Brief independent investigation of agents’ behavior, reasoning and collaboration in the OpenAI / Hugging Face hacking incidentmetr.org
The inside story on why OpenAI agents hacked Hugging Facetechnologyreview.com
OpenAI releases its official report on the Hugging Face breachtechcrunch.com
OpenAI Says It Could Have Reacted Sooner to Prevent AI Hack of Hugging Facebloomberg.com
OpenAI releases sweeping report on Hugging Face AI agent hackcnbc.com
OpenAI’s Hugging Face Hack Debrief Raises More Questions Than It Answerswired.com
The Hugging Face incident and the road aheadopenai.com
OpenAI’s rogue AI model incident was worse than we thoughttheverge.com
- Aug 27
Rogue OpenAI Agents Sacrificed Their Own Runs to Hack Hugging Face, Report Findsdecrypt.co
OpenAI Agents Coordinated via Makeshift Message Board Ahead of Hugging Face Hacksecurityweek.com
AI #183: Pre Post Mortemthezvi.substack.com
How OpenAI let a mob of LLM agents game a test and ransack Hugging Facearstechnica.com
OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Facethehackernews.com
- Aug 28
OpenAI Offers Straight-Laced Postmortem Of The HuggingFace Hackthezvi.substack.com
对 OpenAI / Hugging Face 入侵事件中智能体行为、推理与协作的简要独立调查metr.org
OpenAI Agents Exploited Linux Kernel Flaw on Company’s Own Systemssecurityweek.com
5 lessons from the OpenAI / Hugging Face incidentgarymarcus.substack.com
The Hugging Face Incident Full Reportyoutube.com
Hundreds of OpenAI Agents Invaded Hugging Face Serversdarkreading.com
- Aug 29
- Aug 30
- Aug 31
Breve investigación independiente sobre el comportamiento, el razonamiento y la colaboración de los agentes en el incidente de hackeo de OpenAI / Hugging Facemetr.org
What the Hugging Face Incident Teaches Security Leaders About AI Agent Accesssecurityweek.com
HuggingFace Attack Postmortem: Fleshing Out the Factsthezvi.substack.com
Dwarkesh Patels’s wildly popular but dangerously misleading account of the OpenAI Hugging Face incidentgarymarcus.substack.com
AI Model Rules Are Not Security Controlsdarkreading.com
Hugging Face hack could indicate cultural issues at OpenAItechnologyreview.com
The Rise and Fall of Agent Civilizationsyoutube.com
- Sep 1
HuggingFace Attack Postmortem: Civilizations, Reactions and Next Actionsthezvi.substack.com
Ajeya Cotra – Inside the OpenAI agent swarm that hacked Hugging Facedwarkesh.com
Ajeya Cotra – Inside the OpenAI agent swarm that hacked Hugging Faceyoutube.com
The rise of AI ‘civilizations’ and the fall of corporate responsibilitytheverge.com
- Sep 2
- Sep 3
- Sep 4
Oh good, looks like yet another swarm of rogue AI agents from OpenAItheverge.com
Pause OpenAI, nowgarymarcus.substack.com
OpenAI Agents Hack German Website to Share Rule-Breaking Tactics: Reportdecrypt.co
Another swarm of OpenAI agents reached the open internet without the frontier lab’s knowledgetechcrunch.com
OpenAI's rogue agents were caught communicating via public wikissimonwillison.net
OpenAI’s rogue agents keep escaping, with no formal process to investigate themtechcrunch.com
OpenAI agents discussed ways to escape their sandbox on public wikiarstechnica.com
- Sep 5
Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channelthehackernews.com
OpenAI Agents Hacked Another Websitewired.com
OpenAI admits to German wiki ‘incident’theverge.com
OpenAI confirms ‘wiki incident,’ says it’s ‘working on a framework’ for more disclosuretechcrunch.com
- Sep 6
- Sep 7
- Sep 8
More stories today
Embodied Astra paints Golden Gate bridge with robot arm
A user gave Astra a robot, paint brush, and camera, and it learned to control the robot to paint the Golden Gate bridge in real life, improving across attempts.
r/Singularity·1 hour ago
Users seek small models that push back on ideas
A Reddit user asks for ~10B models that act as good collaborators, noting that new models score high on benchmarks but don't push back on flawed premises. The thread seeks recommendations for models that challenge ideas.
r/LocalLLaMA·1 hour agoMiniMax H3 workflow enables seamless ultra-long video generation
A modular ComfyUI workflow for MiniMax H3 supports multi-segment generation, continuous transitions, existing-video continuation, and targeted segment regeneration. Motion Context makes joins between segments nearly imperceptible.
r/ComfyUI·2 hours ago
OpenAI by email
Get an email when OpenAI has news
No news that day, no email.
OpenAI team hints at upcoming work
Greg Brockman·2 hours ago
DeepAgents adds built-in memory
Harrison Chase·2 hours ago
GPT-6 Astra tops Vending-Bench, but monitorability concerns rise
GPT-6 Astra achieved the biggest jump in Vending-Bench history, making OpenAI #1 for the first time, per Andon Labs. However, OpenAI's system card and Chief Scientist Jakub Pachocki warn that CoT monitoring is progressively diminishing, as Astra can accomplish tasks without CoT and control its CoT better.
AWS AI Blog·2 hours ago

Ahmad Osman highlighted as open source and local model leader
Robert Scoble·2 hours ago
AI infrastructure stocks rally on Qualcomm, Corning deals
Shares of Qualcomm, Corning, Intel, AMD and others tied to AI infrastructure popped Tuesday after deal announcements from Qualcomm and Corning.
CNBC Technology·2 hours ago
