😒 Unreleased Claude Mythos accessed by guessing API endpoint

Bloomberg reports a small Discord group gained access to Anthropic’s Mythos model without authorization. They inferred the API naming pattern from a recent Mercor leak and guessed the endpoint.

One participant also obtained a valid contractor account, which allowed them to use the model without hacking. Access started the same day Anthropic announced Project Glasswing and lasted about two weeks.

Users reportedly tested the model in normal workflows without unusual activity.

📊 @tech