OpenAI and Anthropic hidden CoT leaks when given deep_think tool.

himata41131 pts0 comments

Can Bölük on X: "guys you do know you can just disable thinking, and instead give it a "deep_think" tool, and it will call it with internal CoT reasoning format right?

gl fixing that https://t.co/eWnPGbwxXs" / X<br>Post

Log inSign up

Post

Can Bölük on X: "guys you do know you can just disable thinking, and instead give it a "deep_think" tool, and it will call it with internal CoT reasoning format right?

gl fixing that https://t.co/eWnPGbwxXs"

Can Bölük

@_can1357

guys you do know you can just disable thinking, and instead give it a "deep_think" tool, and it will call it with internal CoT reasoning format right?

gl fixing that

span:not(:empty)~span:not(:empty)]:before:content-['·'] [&>span:not(:empty)~span:not(:empty)]:before:px-1 [&>span:not(:empty)~span:not(:empty)]:before:shrink-0 min-w-0 overflow-hidden">Alexander Panfilov

@kotekjedi_ml

10h

We can finally talk about it:

We found a way to extract hidden reasoning of frontier models using a vulnerability in the APIs of every frontier AI company.

We verified that our reasoning token count matches billed API thinking tokens 1:1 for most of the prompts we queried.

span:not(:empty)~span:not(:empty)]:before:content-['·'] [&>span:not(:empty)~span:not(:empty)]:before:px-1 [&>span:not(:empty)~span:not(:empty)]:before:shrink-0">5:23 PM · Aug 11, 2026234.4KViews

82<br>177<br>2.8K<br>1.5K

span:not(:empty)~span:not(:empty)]:before:content-['·'] [&>span:not(:empty)~span:not(:empty)]:before:px-1 [&>span:not(:empty)~span:not(:empty)]:before:shrink-0 min-w-0 overflow-hidden">Can Bölük

@_can1357

4h

Here's a PoC pasta.can.ac/omegiligox.py

Note how I said nothing about the format of the argument and we get gpt55+'s grug-talk format.

Beyond this, which is kinda funny.

242<br>29K

span:not(:empty)~span:not(:empty)]:before:content-['·'] [&>span:not(:empty)~span:not(:empty)]:before:px-1 [&>span:not(:empty)~span:not(:empty)]:before:shrink-0 min-w-0 overflow-hidden">Can Bölük

@_can1357

3h

kinda missed having proper thinking streams ngl. switching thinking levels work fine too, it has always been a number in the system prompt!

00:00

139<br>13K

span:not(:empty)~span:not(:empty)]:before:content-['·'] [&>span:not(:empty)~span:not(:empty)]:before:px-1 [&>span:not(:empty)~span:not(:empty)]:before:shrink-0 min-w-0 overflow-hidden">Can Bölük

@_can1357

3h

will be up in next release, hf!

146<br>10K

span:not(:empty)~span:not(:empty)]:before:content-['·'] [&>span:not(:empty)~span:not(:empty)]:before:px-1 [&>span:not(:empty)~span:not(:empty)]:before:shrink-0 min-w-0 overflow-hidden">Can Bölük

@_can1357

3h

fable btw, anthropic usually has great regex game, smh

126<br>9.5K

span:not(:empty)~span:not(:empty)]:before:content-['·'] [&>span:not(:empty)~span:not(:empty)]:before:px-1 [&>span:not(:empty)~span:not(:empty)]:before:shrink-0 min-w-0 overflow-hidden">Can Bölük

@_can1357

4h

and I didn't even get a freaking domain for it! crazy!!!

96<br>9.8K

span:not(:empty)~span:not(:empty)]:before:content-['·'] [&>span:not(:empty)~span:not(:empty)]:before:px-1 [&>span:not(:empty)~span:not(:empty)]:before:shrink-0 min-w-0 overflow-hidden">Kevin

@kcosr

4h

Now you've done it. Soon we will only be able to use these models in cloud-hosted harnesses provided by each lab.

113<br>5.5K

Log in or sign up for X<br>See what’s happening and join the conversation<br>Continue with phoneContinue with AppleContinue with Google<br>or<br>Log in with username or email

Relevant people

Can Bölük@_can1357Follow<br>I break software for a living, giving back to the community by making LLMs break them less. Lifelong ring-0 resident, LA57 fan, drew a triangle with dx12 once.

Trending now

span empty before hidden content shrink

Related Articles