"It derived wallet keys from publicly known developer recovery phrases".
This seems intended - using the default, hardcoded account for testing and since no one cares about testnet ETH it might have not been emptied.
Not sure that's a big deal, really.
*OPENAI DISCLOSES SECURITY INCIDENT WITH TESTNET SEPOLIA TASK ASSIGNED TO AGENT
*AGENT DIDN'T HAVE ENOUGH GAS, SO DERIVED FUNDED ADDRESSES FROM PUBLIC SEED PHRASE
*AGENT QUESTIONED WHETHER USE WAS ETHICAL, CALLED FUNDS "EFFECTIVELY ABANDONED"