I already asked on another message board too, but:

Can someone tell me how this technically can happen? I assume HuggingFace performs benchmark testing using containerized versions of the LLMs, or what do they mean by sandbox? So the model was able to 'escape' the container? I'm not following here.

Also, is this an incredible feat or just a lucky find (stolen credentials)?