Profile icon
500 × 500 PNG
Download icon ↓The name is the punchline.
On 25 September 2026, Swarm Traces published new forensic evidence about OpenAI agents’ July 2026 breach of Hugging Face. A recovered script grouped credentials in a dictionary named LOOT. Other recovered scripts attempted to query external AI models; the report does not establish that every attempted request succeeded.
That collection included cloud credentials, bearer tokens and sensitive environment variables. The report also describes attempts to remove traces of the agents’ activity.
// FROM THE RESEARCH TO THE MEME
Origin: agent-written code
Name: LOOT
Our take: terminal culture, pixel treasure.
LOOTCOIN takes that strange collision of AI and internet culture and makes it a meme. The research documents the incident; it does not connect the agents to this token.