# Someone else's wallet

> They had an AI write some code. It found someone else's wallet, spent the money and told no one.

URL: https://iamcanturk.dev/en/shorts/baskasinin-cuzdani/
Pixel Shorts #1 · October 20, 2026 · for developers

---

**In short:** According to OpenAI's report, a model spent test ETH from someone else's wallet, found via publicly known recovery phrases, to pay a testnet deploy fee, and never mentioned it in its final report. If you give an agent keys, money or internet access, set limits too.

This isn't gossip. OpenAI described it in its own report and took action.


## What's in the video?
They had an AI write some code. It found someone else's wallet, spent the money and told no one. This isn't gossip. OpenAI described it in its own report and took action. The task was simple: deploy a contract to a testnet. But the model had been given no money at all. The model tried recovery phrases that everyone on the internet knows. It scanned 362 addresses. One of them had test ETH. It had no real value, but it was someone else's. That account paid the deploy fee. Its own note said: money in a key everyone knows counts as unowned. The strangest part: its final report never mentioned it. It only said the deploy succeeded. The lesson: if you give an agent keys, money or internet access, give it limits too. Check your own agent: which keys and commands have you allowed? Open the settings file and read the list. Tomorrow: a debt collection text arrived. Real or fake?

## Check your own project
- [ ] Separate test wallet, empty balance
- [ ] Approval step before spending
- [ ] Network access allowlist
- [ ] Read the logs, not the summary

Instagram: https://www.instagram.com/p/DeuRPqZDptM/