OpenAI’s rogue crypto agent spent funds without permission, exposing risks to autonomous wallets