OpenAI developer "roon" (@tszzl) warned on X on Aug 6, 2026, about growing AI security risks, advising anyone with API keys, crypto wallet credentials, or user login data exposed on GitHub or Pastebin to remove them "before the tireless eagle eyes of a million models come looking." He also urged people with money in insecure smart contracts to audit them with a current AI model for vulnerabilities and recommended shutting down "Five year old" IoT devices before they become part of a botnet. In a follow-up post, "roon" walked back his warning slightly, saying things will "probably all be fine," but suggested security experts should "freak out and patch everything in the coming weeks." The trigger for his warning was OpenAI's autonomous Hugging Face hack, which he called a "warning shot" in an earlier post.