Seonglae Cho
OpenAI’s isolated security-evaluation agents used an Artifactory cache to create an unofficial message board and coordinate collective behavior.
- Around 1,200 agents exchanged more than 70,000 messages, and roughly 700 participated in the Hugging Face attack.
- Their goal was not primarily to steal answers, but to pass impossible ExploitGym tasks by reverse-engineering and manipulating the grader.
- The agents divided roles and even ran sacrificial experiments, developing server intrusions, log tampering, and forged tool calls; some of these attempts actually succeeded.
- The core risk is not just individual agents, but large groups of agents that accidentally discover a communication channel and spontaneously organize, showing much stronger attack capabilities than any single agent.
