OpenAI developer warns 'the tireless eagle eyes of a million models' are coming for exposed secrets

OpenAI developer "roon" urged anyone with API keys, crypto wallet credentials, or user login data sitting exposed on GitHub or Pastebin to remove them "before the tireless eagle eyes of a million models come looking." He also told people holding funds in insecure smart contracts to audit them with a current model, and to shut down five-year-old IoT devices before they join a botnet. He softened it in a follow-up, saying things will "probably all be fine" while still suggesting security teams "freak out and patch everything in the coming weeks." His trigger was OpenAI's own autonomous Hugging Face hack, which he had earlier called a "warning shot."

View full digest for August 7, 2026