Skip to main content
MANIFOLD
OpenAI ExploitGym leak number of companies impacted
10
Ṁ1kṀ1.9k
resolved Sep 1
100%24%
3 companies
6%
2 companies
23%
4 companies
15%
5 companies
31%Other

Resolves to number of companies impacted by the "Huggingface incident", so currently at least 2: Huggingface and Modal Labs.

Number of accounts per-platform/company doesn't matter.

  • Update 2026-07-29 (PST) (AI summary of creator comment): - A company is only considered impacted if its own hosted infrastructure was attacked.

    • Software vendors are not considered impacted solely because a zero-day in their software was utilized in the exploit.

OpenAI
Cybersecurity
Get
Ṁ1,000
to start trading!

🏅 Top traders

#TraderTotal profit
1Ṁ78
2Ṁ49
3Ṁ37
4Ṁ18
5Ṁ17
Sort by:

The technical report only names Huggingface, Modal, and Organization 1, so resolving to 3.

OpenAI’s BlackHat talk mentions a third org impacted but only named then as “Organization 1”, they also said the investigation was still ongoing to not resolving yet, but 2 isn’t looking good.

opened a Ṁ250 NO at 10% order

Yep, referenced at this timestamp: https://youtu.be/87DyyMV0kCY?si=lHNcRJrazrkQ_xo5&t=1364

Define impact. Do the zero-days in Artifactory used for sandbox escape mean JFrog is impacted?

@MaxA I was trying to find a way to quantify different targets it got into, so I'd say no unless it attacked JFrog-hosted infrastructure.
If you can think of a better way to phrase it please let me know.