Tech industry is buzzing after a Claude agent hacked into a gym

But Bird’s OpenClaw had used 4.6, he disclosed. That implies that older models, as well as countless three-steps-behind open-weight models, are already exceptionally good hackers. So who knows how many of them have hacked, or are currently hacking, in order to achieve their prompt-owners desires?

Likewise, many people on X saw the humorous potential in this incident. As Andreessen Horowitz partner Christian Keil posted in response: “This is just terrible. Anyone know if it works for golf tee times?”

Or as X user Roon noted, “the sf tennis reservation system will become one of the most hardened softwares on the planet of earth.”

Funny, yes. But there’s some truth that these jokes get at. There’s a future that the Valley is building where everyone has an AI agent working on their own behalf. This agent was only doing what was asked of it and did not have Mythos-level capabilities at its disposal.

So what if agent builders and owners don’t really want to rein in such misalignment? We could be looking at the first hint of pandemonium for everything from airline reservations to concert tickets, or any other frustrating customer-service situation. As one person on X put it, what’s the wildest hack AI has discovered so far? It could be cutting in line.