GPT-4 once gave top-5 token probs with no hidden CoT — researcher says it could've been cloned for under $10M

carrigmat · x · 2026-10-23

Researcher carrigmat points out an irony given today's stringent anti-distillation measures: GPT-4 used to expose top-5 token probabilities with no chain-of-thought to hide, and he estimates you could probably have recovered the whole model for under $10M.

A striking observation on how quickly the model-weight protection landscape has shifted, from freely available logprobs to aggressive distillation defenses.

Related event: Researcher: Early GPT-4's Exposed Token Probabilities Made Distillation Cheap(2 posts)→

Original post →

More from Models

Models channel →