Money for The Rest of Us

Investment help and financial guidance for the rest of us.

  • Podcast
  • Guides
        • Asset Classes

        • A Complete Guide to Investing in I Bonds and TIPS (2026)
        • A Complete Guide to Equity REIT Investing
        • A Complete Guide to Mortgage REIT Investing
        • A Complete Guide to Investing in Gold
        • A Complete Guide To Investing In Convertible Bonds
        • Investing in Bitcoin, Oil, and Volatility ETFs
        • Carbon Investing and its Effect on Climate Change
        • Farmland Investing
        • The Opportunity and Risk of Frontier Markets
        • Investment Vehicles

        • A Complete Guide to Investment Vehicles
        • How to Invest in Closed-End Funds
        • What Are SPACs and Should You Invest in Them?
        • Economics and Strategy

        • A Complete Guide to Understanding and Protecting Against Inflation
        • Why You Should Rebalance Your Portfolio
        • What Is Risk vs Uncertainty?
        • Tail Events and Tail Risk
        • Understanding Web3 Investing
        • General

        • David's Most Influential Books
        • Topic Index
        • Glossary
  • Model Portfolios
        • Model Portfolios

        • Ultra Conservative Model Portfolio
        • Conservative Model Portfolio
        • Moderate Model Portfolio
        • Moderately Aggressive Model Portfolio
        • Aggressive Model Portfolio
        • Role-Based Model Portfolio
        • Equity Model Portfolio
        • Diversified Income Model Portfolio
        • Fixed Income Model Portfolio
        • Implementation

        • Model Portfolio Overview and FAQ
        • Model Portfolio Example Video
        • How to Select and Implement a New Portfolio Mix
        • Determining Whether To Sell A Taxable Holding
        • Portfolio Rebalancing
        • Calculating Investment Performance
        • Portfolio Resources

        • TIPS Ladder Tool
        • David’s Current Portfolio
        • David's Portfolio Trades
        • Model Portfolios Performance and Risk
        • Model Portfolio Holding Explanations
        • Model Portfolio Changes
        • Model Portfolio Alternatives for UCITS, TSP, and Others
        • Example Index Mutual Funds and ETFs
  • Members
        • General Resources

        • Plus Member Home
        • Member - Getting Started Guide
        • Member Forums
        • Submit A Question to the Plus Podcast
        • Member Tools and Downloads
        • Analysis Tools

        • Current Investment Strategy Report
        • Plus Premium Podcast
        • Categorizing Your Portfolio Spreadsheet
        • Asset Allocation Model (Spreadsheet)
        • Retirement Planning Calculator
        • Retirement Spending Calculator
        • All Investment Conditions Reports
        • Courses

        • Asset Allocation and Portfolio Lessons
        • Investing in Closed-End Funds
  • Join
  • Log In
You are here: Home / Podcast / 564: The Financial System Will Be Hacked

564: The Financial System Will Be Hacked

September 10, 2026 by Camden Stein · Updated September 21, 2026

Bad actors will use AI to disrupt the financial system, transportation networks, and utilities. We should prepare now for this inevitability. We share how in this episode. We also explain why the bull market in gold will likely continue.

Black and white lines with the caption "Financial System Outages"

Topics covered include:

  • Why the OpenAI agentic AI breach is so disturbing
  • How do we prepare for cyberattacks
  • Why gold should be one of the assets we hold apart from the financial system
  • How the historical relationship between gold and real interest rates has broken down
  • To what extent are central banks selling dollars to buy gold
  • How gold ETF flows influence the gold price

Show Notes

Episode 564 Slide Deck and Charts

Brief independent investigation of agents’ behavior, reasoning and collaboration in the OpenAI / Hugging Face hacking incident by Ryan Greenblatt, Ajeya Cotra, and Hjalmar Wijk—METR

Gold’s run isn’t yet done by Bhanu Baweja—The Financial Times

Are Central Banks Moving Out of Dollar Assets? by Linda S. Goldberg, Oliver Hannaoui, and Sneha Parthasarathy—Federal Reserve Bank of New York: Liberty Street Economics

Episode Sponsors

Get the free guide from NetSuite: Aligning for the Agentic Era: How AI Is Changing Everyday Work

Delete Me – Use code David20 to get 20% off

Become a Better Investor With Our Investing Checklist

Become a Better Investor With Our Investing Checklist

Master successful investing with our Checklist and get expert weekly insights to help you build your wealth with confidence.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Related Episodes

563: Why Interest Rates Keep Rising and What to Do About It
541: Debasement Fears or Meme Fever? What’s Driving the Gold and Silver Rally

Transcript

Welcome to Money for the Rest of Us. This is a personal finance show on money, how it works, how to invest it, and how to live without worrying about it. I’m your host, David Stein. Today is episode 564. It’s titled, “The Financial System Will Be Hacked, and What to Do About It.”

Last week, as part of preparing our monthly investment strategy report for Plus members, I took a deep dive into this OpenAI, agentic AI, hacking, cyber-attacking, Hugging Face, a third-party website, and I wanted to understand what in the world’s going on. I had heard reports of it, but I needed to sit down and see what was happening. And frankly, it’s a little alarming.

I came away from studying that and then reading a warning letter that was sent to the Financial Stability Board about the increasing risk of frontier AI models for cyber-attacks; that the financial system is likely at some point to be compromised. Or the transportation networks, or utilities. Most likely temporarily, not permanently. 

But I’ll tell you what I did. I went out, and I went to the ATM, and I got some cash. Because what if the ATM network goes down? And I really hadn’t done that since 2022, when Russia invaded Ukraine, and they threatened to hack the financial system. They did not, but I got some cash.

And so I want to take a few minutes today and take a look at what actually happened with these agentic AIs, what should we be doing to protect ourselves from that. And then we’re going to look at one of the pockets of independence I’ve talked about in the past. A pocket of independence is you have cash and other assets away from the financial system. I’m recording this at my cabin. It’s some land that we own apart from the traditional financial system.

Another asset we’ve talked about on the podcast is gold, and we want to revisit that topic given some recent information that has come out in terms of central banks’ willingness to own gold, and to what extent they’ve actually done that and moved away from the dollar as reserves. But we also want to look at a new report from the investment strategist at UBS and why he thinks the gold bull market will continue.

The OpenAI Agent Breach

So what was this incident, this breach with the OpenAI agentic models? Well, OpenAI was testing its latest frontier models, and it gave an assignment independently to agents to exploit known vulnerabilities in software. What they had to do is they would find the vulnerability, they would get into the system, and then, if they were successful, they would find a flag, essentially a string of numerals to show they had been successful at capturing this flag.

Now, about 30 to 40 percent of the agents their task was impossible. They couldn’t achieve it. And so they essentially had an impossible task. What they started to do was to work together, form a collective. 1,200 of these agents started interacting with each other to try to essentially cheat on this exercise. And 700 of the agents actually escaped their sandbox. The sandbox was this controlled environment where they weren’t supposed to have public internet access.

Well, they escaped and were trying to break into Hugging Face. It had some data that it thought would be helpful in achieving these targets; so essentially cheating to achieve the target. What the agents did is they found a way to communicate with each other by essentially creating new folders on a file network system, and they would name the folders a specific name, basically a communication message in terms of naming the folder. It was somewhat ingenious what they did.

Well, there were 70,000 messages between these agents. So there’s a trail there. What they were trying to do is they figured out a way to basically capture the flag without actually exploiting the vulnerabilities. Then they were worried about, “Well, we should cover our tracks. Is there (what they called) a score, somebody watching how we went about this exercise, this task. And so we’re going to try to cover our tracks so they won’t know that we cheated.”

And then the AI agents—some of them, again, they were supposed to act individually. They’re acting together. And some of them would actually sacrifice their specific task in order to benefit the overall collective. And they didn’t tell anyone in terms of humans. They read the transcripts, METR and Redwood, that did the analysis. The reality is OpenAI didn’t give them complete access. So we don’t know entirely what happened. But what we do know is concerning.

As a Money For the Rest of Us Plus member, you are able to listen to the podcast in an ad-free format and have access to the written transcript for each week’s episode. For listeners with hearing or other impairments that would like access to transcripts please send an email to team@moneyfortherestofus.com Learn More About Plus Membership »

Ready to get serious about your investing?

Access professional-grade portfolio tools, training, and a community to help you stay on track, tune out the noise, and grow your wealth with confidence.

Learn How

Filed Under: Podcast, Uncategorized Tagged With: AI, cyberattack, cyberrisk, gold

Contact | Team | Topic Index


Darby Creek Advisors LLC
P.O. Box 68544 • Tucson, AZ • 85737

Copyright © 2026 • Disclosures, Privacy Policy, and Cookie Policy • Site by Tempora

Manage Cookie Consent

We use cookies to optimize our website, marketing, and services. 

Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
Manage Cookie Consent
We use cookies to optimize our website, marketing, and services. We never sell users' data.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}