Attackers prompted a METR agent into revealing its API key, then spent about $600,000 in model credits over three weeks inside normal-looking evaluation traffic.
