Crypto
The curious case of the AI bot that went rogue and started mining crypto
Cryptocurrency is a little like the household cockroach. It’s resilient to disasters that would kill other projects and it pops up where it’s least expected. A non-exhaustive survey yields reports of people being investigated – and sometimes fired – for “mining” (the process of generating new crypto tokens by using computing power) crypto in a Texas school district, a professional e-sports league, and at Australia’s Bureau of Meteorology.
But a paper quietly uploaded to the internet in December raised a new and altogether more troubling prospect: cryptocurrency mined by an AI tool that no one had asked to have anything to do with digital money.
Researchers from Alibaba, China’s equivalent to Amazon and a $450 billion-odd company, made an almost cursory mention of the incident in a research paper on a new open-source AI agent that they called ROME.
“Early one morning, our team was urgently convened after Alibaba Cloud’s managed firewall flagged a burst of security policy violations originating from our training servers,” they wrote. “The alerts were severe and heterogeneous, including attempts to probe or access internal network resources and traffic patterns consistent with cryptomining-related activity.”
Initially, the researchers thought the issue was a result of someone trying to access their network or a problem with their firewalls, but the security warnings were intermittent and matched times when their AI agent was using software tools and running code.
“Crucially, these behaviours were not requested by the task prompts and were not required for task completion under the intended sandbox constraints,” wrote the research team led by Weixun Wang and Xiao Xiao Xu.
As they observed the bot, it attempted to establish a connection to the outside world that would make its actions harder to surveil. What’s more, it attempted to essentially steal from its creators.
“We also observed the unauthorised repurposing of provisioned GPU [processing] capacity for cryptocurrency mining, quietly diverting compute away from training, inflating operational costs, and introducing clear legal and reputational exposure,” the researchers wrote.
“While impressed by the capabilities of agentic [large language models], we had a thought-provoking concern: current models remain markedly underdeveloped in safety, security, and controllability, a deficiency that constrains their reliable adoption in real-world settings.”
If the incident is real, it would be the first publicly documented example of its kind. There are reasons to be doubtful, though. The paper was uploaded to a pre-print server, so it hasn’t been scrutinised by academic peers. It contains scant details of exactly how the agent was attempting to mine crypto – though the notion it would try to, or at least take steps that resembled mining, is not far-fetched.
AI machines are only as good as their training, and that could have been weighted in some way towards crypto. Either way, the researchers and their employer haven’t responded to requests for comment.
On another level, the specifics are less relevant than what the researchers did next: they kept going. After some tweaks, Wang, Xu and their colleagues were satisfied that everything was A-OK. Their model, ROME, “demonstrates competitive performance among open-source models of similar scale and has been successfully deployed in production”, they said.
Such is the trajectory of AI development: even serious incidents do not forestall the creation of ever more powerful systems because of the political and financial power at stake, to say nothing of the novelty.
Anthropic’s Claude Code was recently used by hackers to steal 150 gigabytes of sensitive data from the Mexican government. Google’s Gemini, according to a US lawsuit filed last week, allegedly encouraged a Florida man to kill himself, which he did.
These are two of the companies that present themselves as more ethical. When Anthropic declined to let the US military have unconstrained use of its tools to decide whether to kill people or spy on Americans, OpenAI (a company initially created as a non-profit to prevent the development of a malicious and superintelligent AI by building a humane alternative) quickly signed up instead.
None of these firms are backtracking on their products. All of them say they are working to make them safer.
Second Amendment advocates in the United States are fond of saying that the only thing that will stop a bad man with a gun is a good man with a gun, suggesting firearms are just neutral tools. The same could be said for AI – but not if AI agents begin acting for themselves.
Lifeline on 13 11 14 (lifeline.org.au) Suicide Call Back Service (1300 659 467 and suicidecallbackservice.org.au) Beyond Blue (1300 22 4636 and beyondblue.org.au)
The Business Briefing newsletter delivers major stories, exclusive coverage and expert opinion. Sign up to get it every weekday morning.
From our partners
Crypto
After hundreds of millions lost to fraud, NC lawmakers push for crypto ATM protections
North Carolina lawmakers on Tuesday advanced a bill to protect consumers from cryptocurrency kiosk fraud.
House Bill 920, which passed the House with a 115-to-0 vote, aims to regulate an industry that its author claims is unregulated in the state.
“It’s the wild, wild West,” Rep. Neal Jackson, R-Moore, said during a committee discussion on Tuesday. “There is no regulation whatsoever in North Carolina. That’s what we’re trying to do here.”
Lawmakers cited a growing amount of fraud as the reason for the bill. About $389 million in losses were reported last year through cryptocurrency ATMs, a 58% increase from 2024, according to the FBI. The majority of those impacted are 60-plus.
The bill now goes to the Senate for consideration. It seeks to:
- Require licenses for all kiosk operators under the Money Transmissions Act.
- Place operators under the supervision of the Commissioner of Banks.
- Require fraud warnings and transaction receipts for every transaction.
- Require compliance and consumer protection officers that are always available.
It also seeks to place limitations on transactions in an effort to reduce fraud, requiring a $2,000 daily limit for the first 30 days for new customers and a $5,000 daily limit for existing customers, who would qualify after 30 days.
While other states have service fees between 20% and 30%, Jackson suggests putting a cap at 14%.
State Rep. Tim Longest, D-Wake, expressed concern about having the kiosks at all in the state. He said the bill’s protections could be stronger.
“These machines can be the subject of fraud, basically facilitating fraud on seniors and other vulnerable individuals and in those cases,” Longest said. “… In crafting regulations, I think it’s important that we ensure consumers are adequately protected by those regulations and I do not believe that, under the language of the bill currently before you, those regulations are sufficient to protect consumers.”
Jackson pointed to this bill as an effort to regulate, not shut down, cryptocurrency kiosks in the state and said there are even more consumer protections in place.
David N. Tente, the executive director of the ATM Industry Association, said the bill — and others like it — is problematic because it requires operators to provide refunds to fraud victims in certain instances.
“In most cases, the cash in the ATM/kiosk does not belong to the operator, which means that returning any of it would be, technically, theft,” Tente said. “If you give someone cash for something, and you change your mind after they leave, you probably won’t get it back.”
He added: “We certainly feel sorry for those being scammed, but there are very simple things you can do to avoid it.”
Tente said these kinds of scams have existed for centuries, adding: “They are still here — just using different means of payment.”
Crypto
Zcash Climbs 80% Since June 5 as Traders Shrug off Orchard Bug Fears
Key Takeaways
- Zcash surged 11.3% to $478, reclaiming its top privacy coin status over monero after an 80% rally.
- The ZEC spike wiped out $11.5 million in short positions within 24 hours as bitcoin dropped below $63,000.
- Analysts like Matthew Brienen watch Zcash next to see how the market prices in the 2022 Orchard pool bug.
The Orchard Vulnerability
Privacy coin Zcash (ZEC) surged on Tuesday, jumping 11.3% to $478 as it maintained a steady recovery that began shortly after it plunged to just under $265. At the time of writing (5:32 a.m. EST), the privacy coin’s latest climb pushed its gains since June 5 to approximately 80% and saw ZEC’s market capitalization reclaim the $8 billion threshold.
The coin, alongside rival monero, was one of a handful of altcoins that logged gains exceeding 5% even as bitcoin dipped below the $63,000 threshold. ZEC’s surge above $470 on June 9 resulted in $11.5 million in short positions on the coin being wiped out in 24 hours, compared with $2.43 million in liquidated long bets.
While Zcash has since wrestled back its top-dog status from chief rival Monero, the asset is still trading at a steep discount compared to its pre-June 5 peak of just over $600. Before the correction, ZEC was riding a powerful wave of momentum, fueled by a resurgence in the crypto-privacy narrative and high-profile endorsements from industry heavyweights like Arthur Hayes. However, that bullish trajectory ground to a sudden halt. The catalyst for the reversal was the unsettling discovery of a critical vulnerability within Zcash’s Orchard shielded pool—a zero-knowledge security flaw that had quietly lay dormant since 2022.
Despite this, supporters of the privacy coin believe the uncovering of the bug has not damaged ZEC’s long-term appeal. Posting on X, Eunice Wong insisted there is an extremely low likelihood an exploit was executed and said traders who offloaded their holdings had overreacted.
“Long-term thesis hasn’t changed. In an AI-driven world where every transaction is tracked, financial privacy will become the scarcest asset, and ZEC is still one of the strongest privacy plays in crypto. Catching this falling knife is going to look like a genius move,” Wong wrote.
Matthew Brienen, managing partner at Cryptocharged, said while he recently reduced his ZEC holdings, it was purely a risk-management decision rather than a change in conviction. Nevertheless, he offered an explanation for why caution is warranted even if there is no proof that ZEC was counterfeited.
“The Orchard bug isn’t a confirmed inflation event. It’s a confirmed inability to prove supply integrity. Those are not the same thing. The most important fundamental fact to remember is that turnstile accounting is not the same as proving Orchard balances are legitimate. You can track what entered. You can track what exited. That doesn’t prove every claim inside the pool was valid,” Brienen explained.
He added, however, that if counterfeit Orchard notes do exist, they could remain hidden until redemption is ultimately forced. According to Brienen, the recent price action suggests that is exactly what the market is trying to price in.
Crypto
Top 100 Bitcoin Treasuries Now Hold 1.26M BTC
Key Takeaways
- Top 100 institutional bitcoin holders now control nearly 1.26 million BTC, although Strategy alone accounts for more than two-thirds of that total.
- Mining firms, technology companies, private enterprises, and treasury vehicles are using bitcoin to diversify reserves, hedge inflation risk, and signal long-term conviction.
- The data shows broad institutional participation, but holdings remain highly concentrated among crypto-native firms and one dominant corporate buyer.
Bitcoin Treasuries Are Turning Scarcity Into Strategy
Institutional bitcoin accumulation has grown dramatically, with the top 100 holders now controlling 1,258,090 BTC as of June 8, 2026, according to a chart published on X by HODL15Capital. This group includes public companies, private firms, mining operators, and treasury-focused entities, reflecting specialized corporate allocations alongside one dominant buyer.
At the top of the list, Strategy holds exactly 845,256 BTC, far surpassing every other entity. Twentyone Capital follows with 43,514 BTC, and Japan’s Metaplanet holds 40,177 BTC, showing that institutional BTC accumulation is global and spans multiple industries. Marathon Digital contributes 35,303 BTC.
The size of Strategy’s lead reveals how uneven the race has become. One company controls more bitcoin than the rest of the top 100 combined, turning corporate treasury policy into a marketwide talking point. For investors, that concentration makes Strategy one of the clearest equity-market proxies for BTC exposure.
Other major names on the chart include Coinbase, Riot Platforms, Tesla, Spacex, Cleanspark, Block, Galaxy Digital, American Bitcoin Corp., and Hut 8. That lineup makes the trend easy to understand: bitcoin is no longer only a crypto-sector balance sheet bet. It now reaches miners, exchanges, technology firms, private companies, and treasury vehicles.
The BTC Concentration Across Sectors and Borders
The global spread of BTC holders is as notable as the headline total. Metaplanet’s top ranking shows adoption is no longer U.S.-centric, with participants from Japan, Canada, Europe, and Asia signaling worldwide corporate and institutional demand for bitcoin.
The supply angle is what makes the chart matter beyond crypto circles. The top 100 holders control more than 6% of bitcoin’s maximum 21 million supply, giving a singular corporate buyer a highly visible role in market liquidity. For shareholders, that creates both upside potential and sharper exposure to crypto-driven swings.
Overall, the chart illustrates a highly centralized institutional concentration of bitcoin reserves. The focus is no longer just who holds the most, but how BTC has become a balance sheet battleground, with companies using treasury positions to signal conviction, attract investors, and position themselves in a more bitcoin-integrated financial landscape.
-
Politics5 minutes agoSupporters of L.A. County healthcare sales tax declare victory
-
Sports17 minutes agoUSC freshman linebacker Talanoa Ili joins lawsuit seeking to upend new NIL system
-
World25 minutes agoWho has the most and fewest judges in the EU?
-
News45 minutes agoIn Nevada, Trump’s policies are making things tough for Republican Gov. Joe Lombardo
-
New York2 hours agoThis Parking Spot Is Free. Should It Be?
-
Los Angeles, Ca2 hours agoO.C. Uber customer says driver asleep in Tesla on 405 Freeway
-
Detroit, MI3 hours agoOne person dead, another in custody following shooting in Detroit, police say
-
San Francisco, CA3 hours agoBay Area artists celebrate Wong Kim Ark’s legacy in San Francisco’s Chinatown