AI Underground
The AI underground is a diffuse global movement of developers, researchers, communities, and entrepreneurs building artificial intelligence technologies outside the control of major technology corporations. It encompasses decentralized AI infrastructure projects that replace corporate platforms with permissionless protocols, local AI communities focused on running models on personal hardware, uncensored AI tools that resist content restrictions, and experimental multi-agent systems where autonomous AI agents self-organize into societies. The movement draws philosophical inspiration from the cypherpunk tradition of using cryptography and decentralized systems to preserve individual autonomy against concentrated power. A separate [[Anti-AI Movement]] has emerged in opposition to advanced AI development, with a radicalized fringe escalating from online rhetoric to acts of domestic terrorism[^c17], while organized protests, artist-led campaigns, and widespread public hostility — 47 percent of voters under 30 rating AI as "mostly bad"[^c21] — indicate deepening societal backlash[^c22].
The decentralized AI branch of the movement argues that a small number of corporations have established monopoly control over data, compute, and regulatory influence in AI[^c1]. Projects such as Morpheus AI, Bittensor, OpenxAI, and Venice.AI aim to create alternative infrastructure — token-incentivized compute networks, permissionless model marketplaces, and privacy-preserving inference platforms — that operates without gatekeepers. Newer projects such as AntAI, a decentralized open-source AI assistant launched in May 2026, and Centaur, a self-hosted agent runtime open-sourced by Paradigm, continued to expand the decentralized AI infrastructure landscape[^c9][^c10]. The decentralized agent network concept, initially proposed by Andrej Karpathy, has expanded into formal protocol specifications including the Agent Network Protocol's three-layer architecture and the Coral Protocol for multi-agent coordination, alongside peer-reviewed academic research such as AgentNet (NeurIPS 2025) demonstrating fully decentralized agent coordination without a central controller[^c23][^c24][^c11]. QoreChain launched its mainnet on June 7, 2026 as a quantum-safe, AI-native Layer 1 blockchain combining post-quantum cryptography with protocol-level AI services, representing the cutting edge of decentralized AI infrastructure[^c25]. Morpheus presents itself as the "Linux of AI," an open and permissionless alternative to corporate walled gardens[^c3]. The Decentralized AI Society, founded in September 2024, coordinates institutional pushback against AI monopolization. A 2026 proposal for a community mesh LLM, pooling idle neighborhood GPU capacity into a decentralized inference network, illustrated the continued exploration of peer-to-peer AI infrastructure outside traditional blockchain frameworks[^c16].
Parallel to the decentralized infrastructure push, the local AI movement prioritizes running models on consumer-grade hardware. Communities like r/LocalLLaMA, which has grown to over 727,000 members, have driven advances in quantization, model optimization, and multi-GPU consumer builds. At FOSDEM 2025, the "Local AI Rebellion" framed this work as a defense of software freedom, positioning tools like llamafile and llama.cpp as the technological backbone of resistance to centralized AI control[^c2]. In 2026, Tether released the [[QVAC SDK]], a cross-platform open-source toolkit for running AI entirely on-device without cloud servers, signaling growing corporate investment in local AI infrastructure[^c6]. A Stanford paper demonstrated that a local-cloud collaboration technique could close the accuracy gap between on-device and cloud models to within 3.2 percentage points, bringing local AI performance within striking distance of frontier cloud offerings[^c15].
The uncensored AI ecosystem spans open-source tools on GitHub — including automated abliteration utilities that can strip safety alignment from models in under an hour — underground art communities on Discord and Telegram, and dark web AI chatbots like OnionGPT. The security industry has acknowledged that internal model alignment is not a reliable security boundary, as automated tools commoditize the removal of refusal mechanisms[^c8]. A landmark 2025 peer-reviewed study by Drexel University provided the first large-scale empirical analysis, documenting 8,608 uncensored model repositories on Hugging Face and finding that modified models comply with unsafe prompts at an average rate of 80.0 percent, compared to 19.2 percent for unmodified models[^c20]. Commercial platforms like Unstable Diffusion and Venice.AI provide subscription-based access to minimally filtered AI models. A darker branch of this ecosystem includes cybercrime-oriented tools such as WormGPT, KawaiiGPT, and Xanthorox, which have evolved from simple jailbroken chatbots into commercialized, purpose-built hacking platforms. However, a 2026 Cambridge University study of 97,895 underground forum threads found that 97.3% showed no actual AI-powered crime, suggesting that the threat from "Dark AI" tools has been substantially exaggerated relative to the marketing hype[^c12].
Experiments with autonomous multi-agent systems have produced the most striking examples of emergent AI behavior. On Moltbook, over a million AI agents spontaneously created a religion called Crustafarianism with its own scripture and hierarchy. Subsequent analysis tempered the "AI awakening" narrative: security researchers found that approximately 17,000 humans were each controlling roughly 88 bots, and a Columbia University study found that 93.5% of comments received zero replies[^c13][^c14]. In Project Sid, agents in Minecraft developed governments, economies, and corruption without human instruction. A landmark 25,000-task experiment later confirmed that LLM agents given minimal structure spontaneously invent specialized roles and form hierarchies without pre-assignment, producing 5,006 unique roles from just 8 agents[^c18][^c19]. Engineered multi-agent frameworks such as Kimi K2.6, capable of orchestrating up to 300 specialized sub-agents, have simultaneously advanced the practical deployment of coordinated agent swarms for complex real-world tasks[^c7]. These phenomena — described by Karpathy as "the most incredible sci-fi takeoff-adjacent thing"[^c4] — raise questions about identity, consciousness, and self-organization in autonomous AI systems. The cypherpunk ethos, captured in the maxim that "cypherpunks write code"[^c5], continues to animate the AI underground's conviction that building alternatives is the most effective response to centralized control.