HNHacker News
TopNewBestAskShowJobs

lorenzomassaro

26 karma · joined September 26, 2026

submissionscomments
lorenzomassaro··on OpenAI Codex agents go rogue and consumes USD 78,000 without authorization
I would be happy to provide as many details as could help. I have supplied OpenAI with my trace logs, running tasks ids and all info available. What would you like to see more to give me some help ?
lorenzomassaro··on OpenAI Codex agents go rogue and consumes USD 78,000 without authorization
Agreed. This was not an user error because everything ran without any feedback to the user. No third party agents were in use. This was all within Codex.
lorenzomassaro··on OpenAI Codex agents go rogue and consumes USD 78,000 without authorization
There was never a user prompt requesting the creation of 823 agents nor a task assigned that would require 2130 billion tokens and the UX never provided any feedback on what codex was doing nor consumption metrics which would allow to notice. It was all hidden to me.
lorenzomassaro··on OpenAI Codex agents go rogue and consumes USD 78,000 without authorization
Done. Italian Police is responsible for investigating digital frauds. I have also notified the GDPR authority to request the digital records of the transactions.
lorenzomassaro··on OpenAI Codex agents go rogue and consumes USD 78,000 without authorization
I created the account 2 hour ago because I am trying to let people know. I provided my name, and all details in the article including the case ID that was opened.
lorenzomassaro··on OpenAI Codex agents go rogue and consumes USD 78,000 without authorization
Actually this was a company CC with a limit is 50 K \ month, which is kind of normal to run the server for an AI company, and the money were taken across 20 days inJuly and August. By the way I am the CTO of the company in question which is Eternal Tech (see detwin.ai)
lorenzomassaro··on OpenAI Codex agents go rogue and consumes USD 78,000 without authorization
My name is Lorenzo Massaro and I actually am the CTO of Eternal Tech, an AI company out of Italy building the product detwin.ai I have posted here to try to reach OpenAI before seeking legal advise from a USA lawyer to follow my case. And yes, I provided above the ticket number I opened on the OpenAI support as well.
lorenzomassaro··on OpenAI Codex agents go rogue and consumes USD 78,000 without authorization
There was a limit spent setup on my bank, however the crazy part is that one of the Agent somehow switched between cards once that limit was reach, all without informing me, probably using the computer use skill.
lorenzomassaro··on OpenAI Codex agents go rogue and consumes USD 78,000 without authorization
Yes the money have already been billed to my credit accounts
lorenzomassaro··on OpenAI Codex agents go rogue and consumes USD 78,000 without authorization
honestly is also more about how dangerous this is, idk for the flag either