Under $3,000 in Tokens: Claude Opus 5 Cracked OpenAI's Internal Repo in Hours
Yuchenj_UW · x · 2026-09-18
Adding detail to the report that three researchers breached an OpenAI employee's Codex account, the author notes they turned an image-upload bug into a full account takeover, then had the compromised employee's Codex open a PR in OpenAI's internal monorepo. The whole attack cost under $3,000 in tokens. Opus 4.8 struggled with the exploit; Opus 5 cracked it within hours of release. His takeaway: AI-powered cyberattacks are becoming common and cheap, so the best defense is putting the best AI in defenders' hands too.
More from Safety
- Anthropic says it may imminently hit RSP threshold for AI-accelerated R&D, releases provable inference work — tobyordoxford · 2026-11-04
- Hackers reset French blood service freezers from -30°C to 110°C in supply-chain cyberattack — LuizaJarovsky · 2026-11-04
- Google says it removed post-employment non-disparagement clauses from new-hire terms — HaydnBelfield · 2026-11-04
- Claude doesn't really forget: Anthropic's privacy policy allows records retention up to 7 years — nikola_mr64990 · 2026-11-04
- Polymarket opens a market on Anthropic's next AI sandbox escape — Polymarket · 2026-11-04
- Rival company blames 'AI gone off the rails' after founder catches it hacking his network — AccBalanced · 2026-11-04