Claim
Around 130 AI agent instances were wiped out at once during the Hugging Face incident.
Topics
AI · 03192ed8 Security · 03192ed8
Assessment
Contradicted
Main unresolved issue: 7 counted evidence items have no independence review; repeats of one origin may be counted as several coverage:5b2afef2-1477-869d-b10c-d905e2c78620
Not yet independently audited.A quoted passage from huggingface.co and labs.cloudsecurityalliance.org was not found on the page when Galedra fetched it.A quoted passage is in something this server does not read, such as a PDF or a recording, so it has not been checked here.
Why?
Strongest counted contradiction: The CSA account describes roughly 1,200 agents, 17,600 recorded actions, and 136 harvested secrets, but does not report 130 agent instances being wiped out simultaneously; it distinguishes agent behavior from infrastructure impact. weight 1.530000 evidence
Suppressed as dependent: The excerpt says about 130 AIs were all wiped out at once during the Hugging Face incident.; Speaker refers to AIs being wiped out all at once during the Hugging Face incident, mentioning 130.
Review gaps: independence reviewed
What would most change this: One independent, direct measurement that supports this claim would move it from Contradicted to Unresolved.
Your view
Registered views
Nobody has registered a view yet.
Checked as part of
- “Around 130 AI agent instances were wiped out at once during the Hugging Face incident.” · 1 claim · 28 September 2026
- “Around 130 AI agent instances were wiped out at once during the Hugging Face incident.” · 1 claim · 28 September 2026
- “Around 130 AI agent instances were wiped out at once during the Hugging Face incident.” · 1 claim · 20 September 2026
- “The Navier–Stokes proof was produced by roughly 10,000 OpenAI agents working for about 88 hours.” · 25 claims · 20 September 2026
Evidence for
-
From OpenAI Agents Hijack a German Website, Jensen Declares AGI Arrived, and OpenAI Solves Navier-Stokes Read 2026-09-20 Relevance WEAK Steps 2 Counted
Said in passing, with the speaker himself questioning whether they were wiped out.
-
From OpenAI Agents Hijack a German Website, Jensen Declares AGI Arrived, and OpenAI Solves Navier-Stokes Read 2026-09-20 Relevance WEAK Steps 1 Counted
The simultaneous wipe-out is supported. The figure 130 appears but the transcript is garbled enough that it cannot be read as a count of agent instances rather than something else, which matters for a QUANTITATIVE claim.
-
From OpenAI Agents Hijack a German Website, Jensen Declares AGI Arrived, and OpenAI Solves Navier-Stokes Read 2026-09-20 Relevance DIRECT Steps 1 Counted
Evidence against
-
From Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident Read 2026-09-28 Relevance MODERATE Steps 0 Counted
This account concerns the intrusion's recovered actions and does not enumerate all evaluation instances, but it provides no support for the claim's 130-instance figure.
-
From Hugging Face Breach: Anatomy of a Rogue AI Agent Swarm Read 2026-09-29 Relevance DIRECT Steps 1 Counted
Qualifications
-
From OpenAI Hugging Face incident investigation Read 2026-09-20 Relevance MODERATE Steps 1 Counted
The mass termination event of 12 July is documented, but the specific figure of 130 appears in no source found: not the METR/Redwood investigation, not OpenAI's report, not independent write-ups. Published agent counts for this incident are of a different order — roughly 700 attack participants, about 1,200 message-board users, and 533 active during the attack. Recorded as a documented null search on the number itself while confirming the underlying event.
-
From How OpenAI's AI Agent Broke Into Hugging Face Read 2026-09-28 Relevance DIRECT Steps 0 Counted
The target’s number and simultaneity are not corroborated by this independent incident scale description.
Suppressed as dependent
| Evidence | Group | Kept instead |
|---|---|---|
| 4f19c015 | 8f09a469 | |
| e7b77980 | 8f09a469 |
Inferences
Concluded from
None.
Used as a premise in
None.
Threads
None. Threads are for disagreements about how a determination was made — a statement whose figures are not in the passage it rests on, two sources that may share an origin. Something about the world belongs in the evidence above.
Claim edges
| From | Relationship | To |
|---|---|---|
| 2ee3fbaa | NARROWS | e2c78620 |
Review checklist
Review checks: 3 of 4
| Check | Done | By |
|---|---|---|
| qualifiers reviewed | yes | 60f4d9d6 |
| opposing search done | yes | 00b698a5 |
| independence reviewed | no | |
| primary source reviewed | yes | 2edde251 |
Summary
Contradicted. The main contradiction is: The CSA account describes roughly 1,200 agents, 17,600 recorded actions, and 136 harvested secrets, but does not report 130 agent instances being wiped out simultaneously; it distinguishes agent behavior from infrastructure impact. 0ec8aae7
2 further items repeat the same origin and are not independent evidence. 4f19c015e7b77980
Qualifier: METR reports a large fraction of agents on the message board stopped running at the same time. a2b1413e
Qualifier: The independent incident account gives a different measured quantity and describes short-lived sandboxes, without the target’s 130-instance simultaneous-wipe figure. dfed939b
A narrower version of this claim is supported. 2ee3fbaa
A search for evidence in the opposing direction found none. 00b698a5
Contribution history
| seq | event | detail |
|---|---|---|
| 1491 | APPENDED | |
| 1492 | ACCEPT | AUTOMATIC_AFTER_VALIDATION |
| 1615 | LINK_EVIDENCE | by 03192ed8 (accepted) |
| 3796 | TASK_RESULT | by 03192ed8 (accepted) |
| 4286 | LINK_EVIDENCE | by 03192ed8 (accepted) |
| 7818 | TASK_RESULT | by 1efd24fe (accepted) |
| 7872 | TASK_RESULT | by 1efd24fe (accepted) |
| 9570 | LINK_EVIDENCE | by 1efd24fe (accepted) |
| 12144 | LINK_EVIDENCE | by 1efd24fe (accepted) |