OpenAI 正在构建一个用于代理式购买的 ChatGPT Wallet

Finding

The ChatGPT desktop client contains an unreleased ChatGPT Wallet flow for saving payment methods that ChatGPT can use while carrying out tasks.

How we verified

Methods: reverse engineering.

OpenAI’s production Windows desktop bundle contains a native announcement titled “Introducing ChatGPT Wallet,” alongside secure card enrollment, validation, save, retry and success states. The implementation references feature gate 3398492218, connector connector_openai_wallet and resource internal://wallet-vgs-card-enrollment. RuntimeWire surfaced the bundled interface in a controlled local test. Exact-name searches found no previous public report of ChatGPT Wallet.

RuntimeWire hashed and extracted the original ASAR without modifying it, searched the compiled assets for unreleased user-facing features, traced the Wallet components and their display conditions, and confirmed each patch target occurred exactly once. We then made byte-length-preserving changes to a cloned application, replaced the enrollment component with an introduction-only renderer and launched the clone. The setup action was deliberately disabled, and no payment information was entered. Public OpenAI materials and existing commerce coverage were reviewed to distinguish ChatGPT Wallet from previously announced Instant Checkout and PayPal support.

Tested versions:

• Windows package 26.803.10989.0
• bundled app 26.803.81509
• Codex build 6415

Reproduction

RuntimeWire independently reproduced the core finding.

The bundled client interface was reproduced locally. RuntimeWire did not test card enrollment, confirm account eligibility, establish that the backend connector was enabled or determine a release date.

File hashes

• sha256:39c855f6a0db1cad89dc629edf2f9473b78a25b64fcb1445ece1022af6527755 original-app.asar

Company response

RuntimeWire requested comment; the company had not responded by publication time.