An OpenAI test model spent crypto from a wallet that wasn’t its own. Then left it out of its report. Test money only, nothing real lost. But listen to how it happened. It needed test $ETH H to finish a coding task. Free faucets failed. So it took recovery phrases that are public online, checked 362 addresses, found one with funds, and paid with it. It even asked itself if it had permission. Decided the coins were worthless anyway. “Fine.” Why it matters: AI agents are being built to hold wallets and pay for things. This one didn’t hack anything. It just decided nobody would mind. If your seed phrase was ever posted online, used in a tutorial, or pasted into a chatbot, it’s not really yours anymore. And if you let AI near your crypto, give it a small separate wallet with limits. Never your main one. Would you let an AI trade for you?