Stolen Thoughts: Two API Calls Extract Frontier Model Reasoning; Anthropic Rolls Out Preserved Thinking

zainhas · x · 2026-10-13

The 'Stolen Thoughts' paper shows Anthropic, OpenAI and Google return encrypted chain-of-thought blocks that can be replayed across sessions, users and models. By replaying a frontier model's trace into a weaker sibling and jailbreaking it, researchers recover the stronger model's hidden reasoning in plaintext in just two API calls—without touching the strong model or tripping anti-distillation safeguards. A follow-up audit found verbatim extraction still possible via third-party API providers. Anthropic's response: 'preserved thinking' on Claude Fable 5.1+—the API checks a thinking block's signature so only the producing model or a fixed whitelist (Fable 5.1 reads Opus 5/5.5, not vice versa) can use it, silently dropping blocks otherwise.

Original post →

More from Models

Models channel →