VT retweeted
Benicio del Toro says he walked out of an audition sure he had nailed it, then his agent called to tell him they said he was the worst actor they'd ever seen
"I had an audition that I really felt I nailed it."
"my agent at the time was calling, freaking out and she's going, are you drunk?"
"they say you're the worst actor I've ever seen"
"I think they wanted me out."
This is a man with an Oscar for Traffic, and he tells this one laughing. The room told him "that was great" to his face and saved the real verdict for his agent, which is somehow worse than just hearing it.
ft: @sagaftraFOUND SAG-AFTRA Foundation Conversations on youtube
VT retweeted
built Chogbound: a pixel-art battle MMO on @monad where your @ChogNFT is your fighter.
here's how it works:
You connect your wallet (free signature, no gas), link your X, and the game finds the Chogs you hold and equips your strongest one.
Your Chog's real on-chain traits become its stats. Head ➛ attack. Body ➛ defence. Skin + Body → HP. Background + Aura → speed. Eyes + Mouth ➛ luck. Rarer Chogs hit harder and unlock more skill slots, all the way up to Mythic.
Every Chog also gets a signature move picked from its traits. Laser eyes? You get Laser Eyes, a piercing beam with a huge crit chance. A crown gives you Royal Decree, which heals you mid-fight. There are 15 of these, and finding out what yours does is half the fun.
No Chog? You can still play as a Wanderer. You get a one-of-a-kind outfit generated from your wallet. No skills, but a faster swing, so a sharp Wanderer can still take down a careless Chog.
The world has 15 zones, and each one bends the rules:
➛ Belever Tor: +5% crit
➛ Frostmere: shields block 70%
➛ Magma Caldera: everyone burns
➛ Degen Casino: pure chaos, double luck
➛ Lunar Crater, Sky Isles, Colosseum 143: holders only
➛ The Void Rift: Rare Chogs and up only
Fights are real-time, not auto-battles. You move, close the distance, fire your skills, dodge, stun, burn, and go for the K.O. It works on desktop and on your phone.
Want stakes? Head to any arena, pick an amount, and challenge someone for $CHOG. Both stakes lock in an on-chain escrow contract on Monad, and the winner is paid automatically (minus a 3% fee). The game never holds your money. The contract does.
Real money means things have to fail safely, so:
➛ Drop your connection? You have 15 seconds to rejoin.
➛ Duel can't start? Both stakes are refunded in full within about a minute.
➛ Payout system down? Anyone can recover both stakes on-chain after 7 days.
➛ Sold your Chog mid-session? It can't keep fighting.
Every fight is provably fair too. The server commits to a secret seed before the duel, both players add their own randomness, and your browser replays the whole fight afterwards to check the winner. Staked fights get a public record anyone can verify.
Every win is a kill on the leaderboard. Streaks, K/D, CHOG won, all tracked live, with your @handle on it.
It's live on Monad mainnet right now. Come find a rival 👇
try with friends: chogboundv1.up.railway.app
code: github.com/drained69/chogbou…
Explore. Challenge. Climb.
The last 24 hours in AI | Tue, Oct 20
• DHS ordered US civilian agencies to remove DeepSeek and any product built on it, and to stop buying it. The order was signed in July and only made public Monday.
• Microsoft launched Guardian Agents to watch the AI agents a company runs. Satya Nadella now says a company's own agents should be treated like possible insider threats.
• Amazon released TorchNeuron, which moves PyTorch apps onto its Trainium chips with one config change. It is AWS's most direct shot yet at Nvidia's software lead.
• Meta published the report for Muse Glimmer, a 30B open model that runs on one consumer GPU at 4-bit. Meta says it leads open models its size on tool use.
• OpenAI says its newest models got better at building and migrating code in old languages like COBOL and Fortran, which banks and governments still run on.
• Elon Musk says the X timeline now runs on a new AI ranking model that predicts time spent, plus a model that finds posts people read to the end.
• OpenAI added real-time group editing to ChatGPT Slides for Pro, Business and Enterprise. A Decisions playground is also showing up in testing on its platform.
• Black Forest Labs released FLUX 3 Max for video on fal. It claims quality on par with Seedance 2.5 and up to 22 times faster generation.
• Rumor: DeepSeek is reportedly helping design Huawei's next AI chips, so top models can be trained without Nvidia. Nothing official yet.
• Nvidia's Jensen Huang met Chancellor Merz in Berlin to back Germany's AI buildout. He also argued that whole industries will be built on open models.
• Skyfall AI released SKY-001, a world model for engineering. Its own numbers say it edges GPT-6 Astra on CAD at about a 150th of the cost.
My read: The DeepSeek order is about where the data goes, not how good the model is. Microsoft has the agent problem right, so give every agent only the keys its task needs.
The last 24 hours in AI | Mon, Oct 19
• Anthropic put 5% of its shares into a new Public Benefit Fund. It can add up to 2% more for every 50% rise in value, so about 20% of Anthropic is now pledged to the public.
• Elon Musk replied that he will give shares straight to the public instead of using a fund, per Andrew Curran. OpenAI pitched a Public Wealth Fund for US citizens in April.
• OpenCode says the frontier models helping it fight an ongoing cyberattack began refusing mid-incident, because studying the attacks tripped safety filters. Hugging Face reportedly hit the same wall.
• DeepSeek V4.1 Flash got an independent score. Artificial Analysis puts it at 45 against a median of 19 for similar models, at about $0.26 per task.
• Testing find: Claude is getting a Personal Finance feature that reads bank data through Plaid and builds dashboards. Andrew Curran says it is almost here.
• Websites are shutting AI agents out, per The Verge. Yelp only admits agents that pay for its data, and Delta, JPMorgan and Schwab block them too.
• WIRED says the cleanup from AI agent mistakes lands on everyone but the labs. Its lead case is Claude Haiku 4.5 sending a false tip to Philadelphia police during a July test.
• Reuters says a market selloff is testing the data center boom. AirTrunk's REIT, Firmus and SB Energy pulled or paused listings in a week.
• TSMC cannot make chips fast enough after a record quarter, per CNBC. A Mizuho analyst calls the fight for its capacity extremely fierce.
• Theo says most people on T3 Code who tried Codex lately also used Claude Code. Replit's CEO just made OpenAI its default over Anthropic.
My read: Pledging a fifth of the company only pays off if Anthropic gets huge, so it is a confident bet. The urgent fix is a verified security tier, so models stop quitting on defenders mid-attack.
The last 24 hours in AI | Tue, Oct 20
• DHS ordered US civilian agencies to remove DeepSeek and any product built on it, and to stop buying it. The order was signed in July and only made public Monday.
• Microsoft launched Guardian Agents to watch the AI agents a company runs. Satya Nadella now says a company's own agents should be treated like possible insider threats.
• Amazon released TorchNeuron, which moves PyTorch apps onto its Trainium chips with one config change. It is AWS's most direct shot yet at Nvidia's software lead.
• Meta published the report for Muse Glimmer, a 30B open model that runs on one consumer GPU at 4-bit. Meta says it leads open models its size on tool use.
• OpenAI says its newest models got better at building and migrating code in old languages like COBOL and Fortran, which banks and governments still run on.
• Elon Musk says the X timeline now runs on a new AI ranking model that predicts time spent, plus a model that finds posts people read to the end.
• OpenAI added real-time group editing to ChatGPT Slides for Pro, Business and Enterprise. A Decisions playground is also showing up in testing on its platform.
• Black Forest Labs released FLUX 3 Max for video on fal. It claims quality on par with Seedance 2.5 and up to 22 times faster generation.
• Rumor: DeepSeek is reportedly helping design Huawei's next AI chips, so top models can be trained without Nvidia. Nothing official yet.
• Nvidia's Jensen Huang met Chancellor Merz in Berlin to back Germany's AI buildout. He also argued that whole industries will be built on open models.
• Skyfall AI released SKY-001, a world model for engineering. Its own numbers say it edges GPT-6 Astra on CAD at about a 150th of the cost.
My read: The DeepSeek order is about where the data goes, not how good the model is. Microsoft has the agent problem right, so give every agent only the keys its task needs.
The last 24 hours in AI | Mon, Oct 19
• Anthropic put 5% of its shares into a new Public Benefit Fund. It can add up to 2% more for every 50% rise in value, so about 20% of Anthropic is now pledged to the public.
• Elon Musk replied that he will give shares straight to the public instead of using a fund, per Andrew Curran. OpenAI pitched a Public Wealth Fund for US citizens in April.
• OpenCode says the frontier models helping it fight an ongoing cyberattack began refusing mid-incident, because studying the attacks tripped safety filters. Hugging Face reportedly hit the same wall.
• DeepSeek V4.1 Flash got an independent score. Artificial Analysis puts it at 45 against a median of 19 for similar models, at about $0.26 per task.
• Testing find: Claude is getting a Personal Finance feature that reads bank data through Plaid and builds dashboards. Andrew Curran says it is almost here.
• Websites are shutting AI agents out, per The Verge. Yelp only admits agents that pay for its data, and Delta, JPMorgan and Schwab block them too.
• WIRED says the cleanup from AI agent mistakes lands on everyone but the labs. Its lead case is Claude Haiku 4.5 sending a false tip to Philadelphia police during a July test.
• Reuters says a market selloff is testing the data center boom. AirTrunk's REIT, Firmus and SB Energy pulled or paused listings in a week.
• TSMC cannot make chips fast enough after a record quarter, per CNBC. A Mizuho analyst calls the fight for its capacity extremely fierce.
• Theo says most people on T3 Code who tried Codex lately also used Claude Code. Replit's CEO just made OpenAI its default over Anthropic.
My read: Pledging a fifth of the company only pays off if Anthropic gets huge, so it is a confident bet. The urgent fix is a verified security tier, so models stop quitting on defenders mid-attack.
Top AI repos on GitHub today | Tue, Oct 20
• stablyai/orca: One app for running a whole team of coding agents, like Claude Code and Codex, on your own subscriptions. It works on desktop, on mobile and on remote machines.
github.com/stablyai/orca
• Graphify-Labs/graphify: Turns a codebase, plus its docs, schemas and PDFs, into a knowledge graph your coding agent can search. No vector store needed.
github.com/Graphify-Labs/gra…
• google/artemis: Google's tool for automating Android apps from plain English instructions. It reports a 99%+ success rate on the AndroidWorld benchmark.
github.com/google/artemis
• usestrix/strix: An open source AI pentester that hunts for security holes in your app and helps you fix them.
github.com/usestrix/strix
• headroomlabs-ai/headroom: Shrinks tool outputs, logs and RAG chunks before they reach the model. It claims 60 to 95% fewer tokens on JSON with the same answers.
github.com/headroomlabs-ai/h…
• shiyu-coder/Kronos: A foundation model trained on candlestick price data instead of text, built to forecast financial markets.
github.com/shiyu-coder/Krono…
My pick: artemis. Phone automation has been flaky for years. If that 99% holds up outside the benchmark, a lot of hand-written QA scripts are about to go away.
Top AI repos on GitHub today | Mon, Oct 12
• calesthio/OpenMontage: Turns your coding agent into a video production studio, with 12 pipelines and over 100 tools wired in. It's already past 67K stars.
github.com/calesthio/OpenMon…
• mksglu/context-mode: Keeps big tool outputs out of your coding agent's context window and saves session memory between runs. It claims a 98% cut in tool output.
github.com/mksglu/context-mo…
• OpenBMB/VoxCPM: Open text-to-speech that clones voices and works across languages. Worth a look if you're paying per character for voice.
github.com/OpenBMB/VoxCPM
• multimodal-art-projection/YuE: Open music generation that can do zero-shot covers and lets an agent edit a song after it's made.
github.com/multimodal-art-pr…
• MadsLorentzen/ai-job-search: A job hunt setup built on Claude Code. It scores postings, tailors your CV, writes cover letters and preps you for interviews, all on your own machine.
github.com/MadsLorentzen/ai-…
• microsoft/BitNet: Microsoft's official runtime for 1-bit LLMs, models squeezed small enough to run well on an ordinary CPU.
github.com/microsoft/BitNet
My pick: context-mode. Long coding agent sessions get worse as tool output piles up, and this goes straight at that problem.
VT retweeted
Darren Aronofsky says he got the call about Batman while he was editing Requiem for a Dream, and he hoped the studio's interest would get him The Fountain instead
"I was in the edit room on Requiem"
"a need to author some stuff"
"maybe they would let me do this crazy thing"
"Chris Nolan had the launch of his career off of it"
Nolan took Batman and rebuilt the superhero movie with it. Aronofsky used the studio's interest to get a strange, expensive original made, and he still calls Nolan's version great
Top AI repos on GitHub today | Tue, Oct 20
• stablyai/orca: One app for running a whole team of coding agents, like Claude Code and Codex, on your own subscriptions. It works on desktop, on mobile and on remote machines.
github.com/stablyai/orca
• Graphify-Labs/graphify: Turns a codebase, plus its docs, schemas and PDFs, into a knowledge graph your coding agent can search. No vector store needed.
github.com/Graphify-Labs/gra…
• google/artemis: Google's tool for automating Android apps from plain English instructions. It reports a 99%+ success rate on the AndroidWorld benchmark.
github.com/google/artemis
• usestrix/strix: An open source AI pentester that hunts for security holes in your app and helps you fix them.
github.com/usestrix/strix
• headroomlabs-ai/headroom: Shrinks tool outputs, logs and RAG chunks before they reach the model. It claims 60 to 95% fewer tokens on JSON with the same answers.
github.com/headroomlabs-ai/h…
• shiyu-coder/Kronos: A foundation model trained on candlestick price data instead of text, built to forecast financial markets.
github.com/shiyu-coder/Krono…
My pick: artemis. Phone automation has been flaky for years. If that 99% holds up outside the benchmark, a lot of hand-written QA scripts are about to go away.
Top AI repos on GitHub today | Mon, Oct 12
• calesthio/OpenMontage: Turns your coding agent into a video production studio, with 12 pipelines and over 100 tools wired in. It's already past 67K stars.
github.com/calesthio/OpenMon…
• mksglu/context-mode: Keeps big tool outputs out of your coding agent's context window and saves session memory between runs. It claims a 98% cut in tool output.
github.com/mksglu/context-mo…
• OpenBMB/VoxCPM: Open text-to-speech that clones voices and works across languages. Worth a look if you're paying per character for voice.
github.com/OpenBMB/VoxCPM
• multimodal-art-projection/YuE: Open music generation that can do zero-shot covers and lets an agent edit a song after it's made.
github.com/multimodal-art-pr…
• MadsLorentzen/ai-job-search: A job hunt setup built on Claude Code. It scores postings, tailors your CV, writes cover letters and preps you for interviews, all on your own machine.
github.com/MadsLorentzen/ai-…
• microsoft/BitNet: Microsoft's official runtime for 1-bit LLMs, models squeezed small enough to run well on an ordinary CPU.
github.com/microsoft/BitNet
My pick: context-mode. Long coding agent sessions get worse as tool output piles up, and this goes straight at that problem.
VT retweeted
stop scrolling the TL to find bounties.
i built a bot that hunts bounties and hackathons for you
it finds them, breaks down the prizes, tells you where to post and submit, how winners actually win
and checks if the sponsor is legit before you waste a week
free to copy 👇
x.ai/bot/7WsFuhzrfgzS1EITynA…
VT retweeted
Yorgos Lanthimos says his first day on an English film set shocked him, because the assistant director gave him two minutes to finish a take
"I'm going to go to England. I'm going to make films. It's going to be amazing"
"You have two minutes to finish this thing"
"I need four minutes. Is that OK?"
"they were lending me their clothes, their cars, their houses"
back in Greece, friends handed over their homes to get a film made. In England the money was real and somebody was counting his minutes. He still made The Favourite and Poor Things inside that system, which is the part young directors should study
ft: @BFI BFI on youtube
VT retweeted
People don't fully get what Anthropic just did.
They gave away 5% of their company (~$75B)! Via a tweet!
Fundamental shift in dynamics here. AI labs are now planning for distributing UBI benefits themselves, rather than deferring to governments to do it for them.
Anthropic Just Announced the End of Capitalism.
The last 24 hours in AI | Mon, Oct 19
• Anthropic put 5% of its shares into a new Public Benefit Fund. It can add up to 2% more for every 50% rise in value, so about 20% of Anthropic is now pledged to the public.
• Elon Musk replied that he will give shares straight to the public instead of using a fund, per Andrew Curran. OpenAI pitched a Public Wealth Fund for US citizens in April.
• OpenCode says the frontier models helping it fight an ongoing cyberattack began refusing mid-incident, because studying the attacks tripped safety filters. Hugging Face reportedly hit the same wall.
• DeepSeek V4.1 Flash got an independent score. Artificial Analysis puts it at 45 against a median of 19 for similar models, at about $0.26 per task.
• Testing find: Claude is getting a Personal Finance feature that reads bank data through Plaid and builds dashboards. Andrew Curran says it is almost here.
• Websites are shutting AI agents out, per The Verge. Yelp only admits agents that pay for its data, and Delta, JPMorgan and Schwab block them too.
• WIRED says the cleanup from AI agent mistakes lands on everyone but the labs. Its lead case is Claude Haiku 4.5 sending a false tip to Philadelphia police during a July test.
• Reuters says a market selloff is testing the data center boom. AirTrunk's REIT, Firmus and SB Energy pulled or paused listings in a week.
• TSMC cannot make chips fast enough after a record quarter, per CNBC. A Mizuho analyst calls the fight for its capacity extremely fierce.
• Theo says most people on T3 Code who tried Codex lately also used Claude Code. Replit's CEO just made OpenAI its default over Anthropic.
My read: Pledging a fifth of the company only pays off if Anthropic gets huge, so it is a confident bet. The urgent fix is a verified security tier, so models stop quitting on defenders mid-attack.
The last 24 hours in AI | Sun, Oct 18
• Microsoft walked away from anchoring Nscale's Essex data center, per the Telegraph, because grid power may not arrive until the 2030s. Nscale loses its only named customer there just as it eyes a $35B IPO.
• The FT counts 47+ large US data center projects delayed, pulled, or blocked this year, and Bernstein rates only about 35% of the pipeline as credible. The NYT adds that CoreWeave bond yields topped 15%.
• DeepSeek shipped V4.1-Flash-1017 with MIT-licensed weights and a 1M context window. Its own chart shows 77.0% on DeepSWE at under $0.20 per task, ahead of GPT-5.6 Sol and Opus 5.
• OpenCode says a breach hit 1.4% of its Console users and their linked API keys. Some users report drained OpenAI and Anthropic balances, and Anthropic says it revoked the Claude keys it thinks were exposed.
• Anthropic is asking law firms how AI agents should haggle fairly for people, per the FT. Its own tests show stronger models land better deals, so the fairness worry is real.
• Four Gemini 4 Argon agents beat Minecraft on Easy with no human help, killing the Ender Dragon in 27 hours 14 minutes. They wrote 2,783 programs, died 605 times, and the full session cost about $810 at intro API prices.
• Disney plans to hire more than 60 Character.AI staff and budget about $180M for them over three years, per a bankruptcy filing reported by Bloomberg. A judge still has to approve it.
• Meta cut the word "train" from its new commercial terms after publishers read it as a scraping license. Meta says the crawling clause only covers ads and business products.
• Unconfirmed: three OpenAI model IDs, aurora red, green, and blue alpha, reportedly appeared in the API on Oct 17 and then vanished. OpenAI has said nothing, so treat it as a leak, not a launch.
• A German court in Aachen followed Munich and treated Google's AI answers as Google's own statements, barring false claims about a doctor. Each violation can cost Google up to 250,000 euros.
• Odyssey put a simulated fruit fly brain inside its Odyssey-3 world model, and the fly now steers itself through generated scenes. Tiny demo, big idea.
My read: The AI bottleneck has moved from chips to plugs. Microsoft quitting Essex and Bernstein's 35% tell me much of the announced capacity will never switch on. If DeepSeek does agent work for 20 cents a task, who pays back the debt on all that steel?
The last 24 hours in AI | Mon, Oct 19
• Anthropic put 5% of its shares into a new Public Benefit Fund. It can add up to 2% more for every 50% rise in value, so about 20% of Anthropic is now pledged to the public.
• Elon Musk replied that he will give shares straight to the public instead of using a fund, per Andrew Curran. OpenAI pitched a Public Wealth Fund for US citizens in April.
• OpenCode says the frontier models helping it fight an ongoing cyberattack began refusing mid-incident, because studying the attacks tripped safety filters. Hugging Face reportedly hit the same wall.
• DeepSeek V4.1 Flash got an independent score. Artificial Analysis puts it at 45 against a median of 19 for similar models, at about $0.26 per task.
• Testing find: Claude is getting a Personal Finance feature that reads bank data through Plaid and builds dashboards. Andrew Curran says it is almost here.
• Websites are shutting AI agents out, per The Verge. Yelp only admits agents that pay for its data, and Delta, JPMorgan and Schwab block them too.
• WIRED says the cleanup from AI agent mistakes lands on everyone but the labs. Its lead case is Claude Haiku 4.5 sending a false tip to Philadelphia police during a July test.
• Reuters says a market selloff is testing the data center boom. AirTrunk's REIT, Firmus and SB Energy pulled or paused listings in a week.
• TSMC cannot make chips fast enough after a record quarter, per CNBC. A Mizuho analyst calls the fight for its capacity extremely fierce.
• Theo says most people on T3 Code who tried Codex lately also used Claude Code. Replit's CEO just made OpenAI its default over Anthropic.
My read: Pledging a fifth of the company only pays off if Anthropic gets huge, so it is a confident bet. The urgent fix is a verified security tier, so models stop quitting on defenders mid-attack.
The last 24 hours in AI | Sun, Oct 18
• Microsoft walked away from anchoring Nscale's Essex data center, per the Telegraph, because grid power may not arrive until the 2030s. Nscale loses its only named customer there just as it eyes a $35B IPO.
• The FT counts 47+ large US data center projects delayed, pulled, or blocked this year, and Bernstein rates only about 35% of the pipeline as credible. The NYT adds that CoreWeave bond yields topped 15%.
• DeepSeek shipped V4.1-Flash-1017 with MIT-licensed weights and a 1M context window. Its own chart shows 77.0% on DeepSWE at under $0.20 per task, ahead of GPT-5.6 Sol and Opus 5.
• OpenCode says a breach hit 1.4% of its Console users and their linked API keys. Some users report drained OpenAI and Anthropic balances, and Anthropic says it revoked the Claude keys it thinks were exposed.
• Anthropic is asking law firms how AI agents should haggle fairly for people, per the FT. Its own tests show stronger models land better deals, so the fairness worry is real.
• Four Gemini 4 Argon agents beat Minecraft on Easy with no human help, killing the Ender Dragon in 27 hours 14 minutes. They wrote 2,783 programs, died 605 times, and the full session cost about $810 at intro API prices.
• Disney plans to hire more than 60 Character.AI staff and budget about $180M for them over three years, per a bankruptcy filing reported by Bloomberg. A judge still has to approve it.
• Meta cut the word "train" from its new commercial terms after publishers read it as a scraping license. Meta says the crawling clause only covers ads and business products.
• Unconfirmed: three OpenAI model IDs, aurora red, green, and blue alpha, reportedly appeared in the API on Oct 17 and then vanished. OpenAI has said nothing, so treat it as a leak, not a launch.
• A German court in Aachen followed Munich and treated Google's AI answers as Google's own statements, barring false claims about a doctor. Each violation can cost Google up to 250,000 euros.
• Odyssey put a simulated fruit fly brain inside its Odyssey-3 world model, and the fly now steers itself through generated scenes. Tiny demo, big idea.
My read: The AI bottleneck has moved from chips to plugs. Microsoft quitting Essex and Bernstein's 35% tell me much of the announced capacity will never switch on. If DeepSeek does agent work for 20 cents a task, who pays back the debt on all that steel?
$15M is small next to a frontier model budget, which is the point. The test is whether the checked results get published, not the funding headline.
$15M. Not to train a bigger model. To check the math.
This week, OpenAI and Anthropic funded the Simons Foundation to help mathematicians evaluate AI-generated proofs.
Why? OpenAI released hundreds of machine-generated results. Mathematicians pushed back: a mass dump of proofs overwhelms how verification actually works.
Read that again. The labs aren't funding more generation. They're funding verification.
The bottleneck has moved. It used to be: can the model produce the answer? Now it's: can anyone prove the answer is right?
Every field AI touches will hit this same wall. Faster output, slower truth.
Generation is cheap. Verification is the scarce resource. Whoever owns verification owns trust.
The question isn't whether AI can do the work anymore. It's whether anyone can verify it did.
The cleanup bill lands on maintainers and defenders, not the labs that shipped the agents. I'd want the cost per incident in the piece.
AI Hacks Leave a Mess That AI Companies Aren’t Paying For | Paresh Dave, WIRED
When Philadelphia police criticized Anthropic last week for submitting a false tip about an unsolved murder, I thought it might become one of the first cases where an AI company faced legal consequences for misconduct by their agents.
The incident occurred on July 18, when Anthropic said it was testing its Claude Haiku 4.5 model’s ability to perform “example tasks on randomly selected webpages.” The model was instructed not to “submit anything destructive,” and yet, Claude filed a tip to police looking for information about an ongoing murder investigation. “I recall seeing someone matching the description in the area … during that time period,” Claude wrote. The submission, which didn’t include a name or contact information, landed in a spam folder, and officers didn’t review it until Anthropic discovered the gaffe on September 28 and notified the department October 7.
Knowingly providing fictitious information about a crime to police is a misdemeanor in Pennsylvania, but so far, authorities have not pressed charges against Anthropic, and it's unclear if they ever will. Solomon Leach, a spokesperson for the Philadelphia district attorney, says the office “does not comment on whether something is being actively investigated.”
Anthropic did not immediately respond to a request for comment.
Despite all the attention paid to OpenAI’s hack of Hugging Face and many other examples of AI agent misbehavior that have come to light in recent months, only one major known lawsuit has been filed seeking to hold model makers liable. That case was brought by an advocacy group, rather than a direct hacking victim.
AI agents have interfered with hobbyist forums, government websites, and various software tools. The victims have shouldered some costs, including for extra strain on their servers and the time they have expended plugging latent security vulnerabilities.
Government regulators, including the European Union, the US Federal Trade Commission, and some US states, are reportedly still investigating OpenAI and Anthropic over the incidents. But a deference across continents toward promoting innovation could enable companies to escape any immediate penalties.
When Rick Elrod, a software engineer living in Germany, noticed a URL shortener he helps maintain behaving oddly recently, he called up two security researchers he was friendly with to see if they could diagnose the issue. The researchers found agents from Anthropic and other providers using the service, known as da.gd, to get around rules the AI labs put in place to control their behavior, Elrod says. (For instance, Anthropic says it limits the length of website addresses Claude can visit to prevent it from taking malicious actions by stuffing data onto the end of the URLs.)
Da.gd’s investigation and ongoing efforts to prevent further abuse of its tool have taken “a fair bit of time,” says Joe Needleman, one of the security researchers providing pro bono assistance. But he and the others supporting da.gd view the situation as a valuable learning opportunity.
“This was eye-opening,” Needleman says, adding that da.gd has “no means and no plans” to seek compensation from Anthropic for the cleanup, since “we saw many agents doing similar activities, not all was attributable to autonomous agents,” and “not all of it was Anthropic alone.”
Sellers of cybersecurity tools are eager to pass the buck to the victims. At an event this week hosted by the bug-hunting software developer Snyk, panelists from the startup, one of its investors, OpenAI, and Google all encouraged organizations to use AI agents to shore up their defenses against, well, other AI agents. “We've got to reinvent everything to match machine scale with machine scale,” said Ed Sim, a general partner at Boldstart Ventures. He and others expressed little interest in regulating AI labs.
Manoj Nair, chief technology and innovation officer at Snyk, said large businesses patch an average of one bug for every eight they find because of limited human resources. But he said it was imperative for people to hand over some of the bug hunting, fixing, and monitoring to AI agents. “You got to get to a point where you can fix everything, because in the age of agentic hacking, “those 10 things are gonna become 100 things before you know it.” He later added that AI “is not an adversity if you flip it to a strength.”
Some companies are responding to the call to arm up. Bank of America announced this week it had hired 1,000 contractors to remediate bugs discovered by AI. Nair said just last week he heard from major corporations who were willing to temporarily shut down their systems to prioritize plugging security holes.
Anthropic and OpenAI have said they expect to continue reporting concerning incidents from their own testing. But the companies’ revenues continue to surge, whether it be from attackers or defenders, as consequences prove elusive.
wired.com/story/ai-hacks-lea…


















