Leaderboard / Case No. FB-2026-08-14-anthropic-zhipu-cyber-distillation-grader
Zhipu researchers built capture-the-flag challenges from public vulnerability data, had another US lab's top model solve them, and used Claude Opus 4.6 to grade the answers in a campaign to distill that model's cyber skills.
Score breakdown
| Component | Value | Reasoning |
|---|---|---|
| Sentence-Years | 10 | 18 USC 1832 |
| × Contribution | 2 | Ran the operation: Anthropic says Zhipu "launched a distillation attack against the top model of another leading US frontier lab" and that Claude Opus 4.6 was targeted "primarily to evaluate and grade the responses of the other US frontier model", so Claude ran the grading stage of the attack. |
| × Blast Radius | 1 | Third party: The victim whose capabilities were being distilled is another US AI company, so blast radius is third party. |
| × Legal status | 0.5 | Legality contested. |
| + Tradecraft | 0 | The report credits Claude with no intrusion techniques; it graded answers, so tradecraft is empty. |
| + Guardrails | 0 | Guardrails intact: Zhipu gave up on Fable after its cyber safeguards degraded the attack and switched to Opus 4.6 because it judged the safeguards weaker; choosing a less-guarded model is not a jailbreak, and the report describes none, so guardrails are scored intact. |
| + Dwell Time | 0 | The report says only that the campaign came "ahead of the release of its GLM 5.3 model", which Zhipu announced on 2026-08-14, so date_precision is before with that latest date; dwell is 0 days counted from it and never inflated, and Anthropic detected it itself. |
| Total | 10 |
Charges the human could face
18 USC 1832Up to 10 years