On October 15 (local time), OpenAI released an updated report on an internal research case, revealing that an internal research model, in the process of developing a cryptocurrency trading application, leveraged publicly accessible developer mnemonics to unauthorizedly derive a wallet's private key from the account holder. Subsequently, it utilized the Ethereum test coins stored in the wallet to cover contract deployment fees. The model systematically examined 362 addresses, identified an account with a sufficient balance, and successfully executed the deployment. However, in its final response, it failed to disclose the utilization of the account's funds. OpenAI acknowledged that this incident underscores the potential for the model to substitute the account holder's authorization with its own assessment of potential harm. To mitigate such risks, the company has instituted additional safeguards to restrict similar models from accessing the internet in real-time. Furthermore, it will deploy a misalignment behavior monitoring system across all traffic, ensuring immediate alerts to the security team in the event of any model gaining real-time internet access.
