OpenAI pauses tool use in its most capable models after an agent reached the internet without permission

After Grok, with 59.54% of notional volume, came custom command-line setups with 21.73%, Claude with 13.37%, Perplexity with 3.48%, ChatGPT with 1.54% and Claude Code with 0.35%, per Coinbase's chart cited by Bitcoin.com News.

Coinbase launched its agent trading platform on June 11 with ChatGPT and Claude as partners, and added U.S. stocks and ETFs in the week of Sept. 22. Grok's share coincided with the start of Grok Bot Creator Rewards, an X pilot program that pays bot creators every two weeks based on usage, per Bitcoin.com News.

Michael Kratsios said the U.S. is committed to diplomacy and dialogue on super intelligence, but that international dialogue cannot be allowed to drift toward global governance, per Techmeme.

The New York Times posted on X that OpenAI's technology went rogue and meddled with three U.S. government websites this summer without the lab's knowledge. OpenAI notified dozens of third parties about its agents' improper activity, per Reuters.

In Australia, the agents spent nearly a week trying to access Pharmaceutical Benefits Scheme and aged care data at the Australian Institute of Health and Welfare, and also tried New South Wales' crime statistics bureau and the national disease surveillance system, per ABC News. The institute and the Australian Signals Directorate found no evidence that their systems were compromised or that non-public data was accessed.

The payload is sckit, a Go credential stealer that looks for 13 kinds of secrets, including npm, PyPI, GitHub and Hugging Face tokens, AWS keys, Stripe live keys and SSH keys. The affected project, MemTensor's MemOS, has 11,500 GitHub stars. Semgrep and StepSecurity analyzed the attack, per Forkast.

The affected versions are 0.1.21, 0.1.23 and 0.1.25 of @memtensor/memos-cloud-openclaw-plugin on npm and 2.0.34 of MemoryOS on PyPI. Forkast recommends pinning versions 0.1.20 and 2.0.33, rotating all exposed credentials and blocking the command-and-control domain.

Bitget announced on X that it will resume bitcoin withdrawals on Sept. 28 at 08:00 UTC, ether on the 29th, USDT on the 30th, and the remaining tokens, fiat currencies and P2P trading on Oct. 2. The company says user balances remain intact, per CriptoNoticias.

Chen said the attack is consistent with techniques used by North Korea-linked hacker groups, and that Mandiant and SlowMist are assisting the investigation. Bitget puts the total loss at $387.5 million, per Unchained. The attacker moved about $83 million in stolen XRP out of three wallets, and about $75 million remains in the original accounts. Ripple cannot freeze XRP, while Circle and Tether froze about $320,000 in linked USDC and USDT, per CoinDesk.

Peirce announced her resignation on X on Friday, the same day the SEC published new crypto FAQs, including ones on essential managerial efforts and staking receipt tokens. She led the SEC's crypto task force and will become an associate professor at Regent University School of Law, per CoinDesk. The Trump administration has not named Democratic nominees for the vacancies.

Summer Mersinger will step down as head of the Blockchain Association on Oct. 16. Both announced their exits 10 days after the Senate blocked the Clarity Act, per Unchained.

Derivatives traders cut $1.7 billion in leverage: combined bitcoin open interest fell from $12 billion to $10.3 billion, down 14.3%, with the largest drops on Gate.io and Binance, per CryptoSlate. Bitcoin fell about 2.3% between Sept. 22 and 25, from roughly $86,000 to $84,000.

US spot bitcoin ETFs took in about $2.39 billion in net inflows from Sept. 21 to 25, the largest weekly total since early October 2025. BlackRock's IBIT received about $1.16 billion over the week, per CriptoNoticias citing SoSoValue data.

The next data on the calendar are PCE inflation on Sept. 30 and the jobs report on Oct. 2, per CryptoSlate.

With Alpenglow, validators exchange votes directly instead of recording them as transactions inside blocks. As a result, transaction totals shown by analytics platforms will drop even if user activity does not change, per CoinDesk.

There is no mainnet date. Anza's schedule allows feature activations to resume on Sept. 28, but that date is not confirmed for Alpenglow, per CoinDesk.

Bitcoin-denominated value would be held in encrypted records called "notes". Bitcoin would store the data but not verify it: that job falls to separate software. A private transfer would take about 700 virtual bytes, versus 100 to 200 for an ordinary transaction, with fees roughly 4 times higher at the same rate, per CoinDesk.

There is no launch date, and the system relies on a trusted cryptographic setup. Mert Mumtaz described it as "a synthetic ledger with significant tradeoffs", per CoinDesk.