Kimi K3.1 and Tencent Hy4 accused of gutting cybersecurity skills from open-weight models

Fresh_Sun_1017 · reddit · 2026-11-06

A Reddit post highlights that Kimi K3.1 and Tencent's Hy4 have both stripped cybersecurity, reverse-engineering, and vulnerability-patching capabilities from their open-weight models — a pattern the author calls increasingly common among Chinese open-source labs.

The author warns that if local models are deliberately weakened on security data, defenders won't be able to audit code vulnerabilities, reverse binaries, or patch issues on their own hardware, effectively forcing reliance on closed-source APIs with their false-positive shutdowns. Citing the Hugging Face incident — where open-source models stepped up while closed providers didn't — the post argues that gutting defensive security from local LLMs hurts defenders most, and worries other labs may follow suit.

Original post →

More from Models

Models channel →