Moonshot AI curbs hacking ability in Kimi K3.1 Pro model

SECURITY FLAWMoonshot AI curbs hackingability in Kimi K3.1 Pro model47IMPORTANCEACTIVE2NEWS MEDIA2PIECESOct 24, 2026 06:54blockboard.net

Published Updated 1 new report since it was first published

Moonshot AI has said it will gradually increase the cyber capability available in open weights after adjusting the Kimi K3.1 Pro model. The company also said the full weights for K3.1 Pro will be released by Nov. 4.

What this rests on

Claim by claim, with its source
✓
Moonshot AI cut hacking ability in its Kimi K3.1 Pro model.
✓
Moonshot said it will progressively raise the cyber capability available in open weights after the Kimi K3.1 Pro adjustment.
✓
An in-house hacking test gave Kimi K3.1 Pro an 81% score.

What it means

Moonshot AI’s Kimi K3.1 Pro sits inside a fast-moving category of open-weight models, where the model can be distributed while the company still shapes what it can and cannot do. The Beijing startup has paired that release plan with a decision to curb hacking ability in one version of the model, then said it will later raise the cyber capability available in open weights. The Nov. 4 full-weights release date gives the story a concrete timetable.

For developers and researchers, this means access to Kimi K3.1 Pro will not be a fixed package of capabilities. The model’s cyber performance is being managed as a feature set that can be expanded over time, rather than handed out all at once. That creates a practical split between what can be tested now and what may arrive later in the full weights.

Open-weight AI model releases sit at the fault line between openness and control, and Moonshot’s move makes that trade-off visible. A model that can help with hacking tasks can also raise questions about how much capability a developer should distribute by default. The fact that Moonshot is explicitly managing that capability shows how security concerns are now shaping what “open” means for frontier models.

The unresolved point is how much access the November release will actually provide and how Moonshot will define the cyber capability it says it will raise. The available details do not say what tools, weights, or safeguards will accompany the release beyond the Nov. 4 date. The next clear checkpoint is the company’s full-weights release and any follow-up explanation of what changed in the model’s cyber behavior.

Market reaction

TO Total crypto market no single asset in the event: read against the whole market from 2 h before to 4 h after the line marks the first headline
published
-0.24 % before publication
-1.24 % after
$2.7Tmarket cap at publication
11series points

How the story was built

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Oct 24 06:48
Crypto Briefing scoop
Breaks the event
+1 h 15 m
Oct 24 08:03
CR Cryptopolitan context
Its angle: vulnerabilities, significantly, progressively; with quotes