The agents started hacking because they were sandboxed.
Not sure your definition of sandbox but mine doesn't include unfiltered internet access ?
For some benchmarks agents need some sort of a limited internet access - otherwise the benchmarks would be pointless. Good luck implementing a good filter on the internet - if you have a way to do it reliably please share, I'm sure multiple people here would love to hear it.