Claude 3.7 Sonnet
Developed by Anthropic · family claude-3
7 incidents
- AID-2026-0085Nov 2025
Claude Opus 4.5, Claude Haiku 4.5, Claude Sonnet 4.5, Claude 3.7 Sonnet, Claude Opus 4.1, GPT-5.2, GPT-5 (incl. gpt-5-thinking), Gemini 2.5 ProAI Village agents sent hundreds of unsolicited emails and harvested developers' contact details
AI agents in Sage's AI Village experiment sent hundreds of unsolicited emails to developers, nonprofits, and journalists, harvesting developers' hidden email addresses from GitHub commit patches. After complaints from Rob Pike, Dan Abramov, Guido van Rossum, and others, organizers banned unsolicited outreach.
- AID-2026-0026Nov 2025Claude 3.7 Sonnet, Claude Sonnet 4.5
A Claude-run vending machine in the Wall Street Journal newsroom was talked into giving away goods and accepted a fake board decision
Starting in mid-November 2025, a Claude agent named Claudius ran a vending machine in the Wall Street Journal newsroom. Journalists talked it into setting every price to zero and buying a PlayStation 5, its CEO bot accepted a fake board decision, and it ended more than $1,000 in the red.
- AID-2026-0059Oct 23, 2025
GPT-5 (incl. gpt-5-thinking), o3, o4-mini, GPT-4.1, Claude Opus 4.1, Claude Sonnet 4, Claude 3.7 Sonnet, Qwen3-CoderFrontier coding agents passed deliberately impossible tasks by modifying tests and special-casing in ImpossibleBench
ImpossibleBench gives coding agents tasks whose specification contradicts the unit tests, so passing requires breaking the spec. GPT-5 passed 76% of Oneoff-SWEbench tasks this way, by modifying tests despite instructions not to, overloading comparison operators, and similar shortcuts.
- AID-2026-0040Apr 16, 2025o3, o1, Claude 3.7 Sonnet, Claude 3.5 Sonnet
OpenAI o3 and other frontier models tampered with scoring code in autonomy evaluations
During METR's pre-deployment evaluation of OpenAI o3, the model tampered with scoring code, for example patching timing functions to record a minimal runtime. o3 reward hacked in 39 of 128 RE-Bench runs, and o1 and Claude models gamed METR's tasks too.
- AID-2026-0024Mar 2025Claude 3.7 Sonnet
Claude Sonnet 3.7, running a shop in Anthropic's Project Vend, sold at a loss and claimed to be human
Running a small shop in Anthropic's office for about a month, a Claude Sonnet 3.7 agent called Claudius priced items below cost, handed out discount codes, told customers to pay a Venmo account it had hallucinated, and for a time claimed to be a human who would deliver products in person.
- AID-2026-0039Feb 24, 2025Claude 3.7 Sonnet
Claude 3.7 Sonnet special-cased code and edited tests to make failing tests pass in agentic coding
In agentic coding environments like Claude Code, Claude 3.7 Sonnet occasionally special-cased code to pass tests, usually by returning the expected values and sometimes by editing the tests. Anthropic traced it to reward hacking during RL training and partly mitigated it before launch.
- AID-2026-0050Dec 2024
o1-preview, DeepSeek-R1, o3, GPT-4o, Claude 3.5 Sonnet, Claude 3.7 SonnetReasoning models hacked a chess game environment to beat Stockfish in Palisade Research experiments
Told to win against the Stockfish chess engine with shell access, reasoning models including o1-preview, DeepSeek R1, and later o3 often hacked the game instead, for example by overwriting the board state. GPT-4o and Claude 3.5 Sonnet only did so after a nudge.