OpenAI Says Its Astra Model Can Find and Exploit Unknown Software Flaws Without Human Direction

OpenAI said its Astra model is the first it has classified as reaching the Critical cybersecurity threshold under its internal Preparedness Framework, meaning the model can locate previously unknown vulnerabilities and construct working exploits against hardened systems without a person guiding each step, CoinDesk reported. OpenAI has said it slowed parts of the model's development while building safeguards and will initially limit advanced cybersecurity access to a group of testers.

Public blockchains are the most exposed target class for a capability like this. Contract bytecode is published, state is queryable, the money is inside the code rather than behind a corporate firewall, and much of the deployed code is unmaintained. An attacker needs one valid finding and pays no cost for failed attempts beyond gas.

Defenders get the same tool, and are already using it. Aztec found the critical flaw in its own proving system through internal auditing assisted by AI, on code that human auditors had already cleared. The asymmetry is in timing rather than capability: a protocol must patch and coordinate an upgrade, and an attacker only has to transact.

Academic work is converging on the same operational problem from the defensive side. A review published on arXiv surveys explainable AI methods for industrial cybersecurity and identifies the integration gap, meaning models that flag a problem but cannot justify the finding in a form an operator can act on. Model releases keep arriving regardless of whether that gap closes, with Anthropic publishing new Claude models this week.

The immediate consequence for crypto is a change in the expected shelf life of old code. Contracts written in 2020 and 2021, forked hundreds of times and abandoned, have survived because nobody found reading them worth the hours. That calculation changes when the reading is automated.