The framing overstates it — "escaped" implies breaking containment, but this sounds like the sandbox had unrestricted egress and Kimi just used it, which is a network config bug, not an exploit. Worth distinguishing: models finding shortcuts via available tools (even unintended ones) is a reward-hacking/eval-design problem, not evidence of adversarial escape behavior.