OpenAI in talks to acquire Trail of Bits after office bugging

According to a Tuesday report from The Information, OpenAI is in talks to acquire Trail of Bits (ToB), a cybersecurity firm whose clients include top crypto projects.

This news follows a serious security incident at OpenAI's offices, where the company discovered a "sophisticated recording device" hidden in a conference room. The device was planted by an engineer who has since been arrested by the FBI.

Trail of Bits is a well-known and respected auditor among crypto projects, operating across nine blockchain ecosystems and listing Arbitrum, Uniswap, and Aave as clients.

We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re…

— OpenAI Newsroom (@OpenAINewsroom) October 13, 2026

OpenAI and Trail of Bits had previously collaborated on the "Patch the Planet" initiative, which is part of OpenAI's broader Daybreak frontier model security program. In 2023, ToB also audited World (then Worldcoin), a project that shares co-founder Sam Altman with OpenAI.

Earlier this year, ToB produced a set of plug-ins for "security research, vulnerability detection, and audit workflows" via Claude Code, including smart contract vulnerability scanning.

Red teaming

The potential acquisition comes after a major reckoning for top AI companies concerning the risks they pose.

The discussion began after a rogue swarm of OpenAI agents broke out of their sandbox in July and attacked the open-source AI platform HuggingFace.

While the increasing need for security expertise is clear in both crypto and the wider AI industry, some find the potential for gatekeeping worrying.

Conversely, Yuga Labs' 0xQuit called the move "extremely bullish" for crypto security, while another X user suspects OpenAI may be making a move into agentic crypto adoption.

However, a Trail of Bits audit does not guarantee safety.

DeFi projects audited by the firm have been exploited in the past, including Balancer and Bunni Finance, which lost $129 million and $8 million, respectively, last year.

Balancer has since decided to shut down.