Attackers Don’t Buy Tokens. They Steal Yours.

For six months we ran a global network of AI honeypots with exposed inference and agent endpoints. Attackers found them fast, exploiting days-old CVEs for RCE, stealing environment variables and API keys, and hijacking our infra to run offensive tooling against real victims. The twist: to abuse our tokens they had to hand over their prompts, tools, and reasoning, leaving the attacker's intent…