Connect with us

AI

Anthropic Rolls Out Its Most Powerful Cyber AI Model — Days After Leaking Its Own Source Code

Published

on

The launch of Claude Mythos Preview and Project Glasswing, mere days after Anthropic accidentally exposed 512,000 lines of its core product’s source code to the world, is either the most audacious act of strategic redirection in Silicon Valley history — or the most revealing window yet into the contradictions at the heart of frontier AI development.

There is a particular species of Silicon Valley irony that only manifests at the very frontier of technological ambition. On March 31st, 2026, an Anthropic employee made a mistake so elementary it would embarrass a first-year computer science undergraduate: a debug source map file was accidentally bundled into a public software release, pointing to a cloud-hosted archive of the company’s most commercially prized product — the source code of Claude Code, its flagship agentic coding assistant. Within hours, 512,000 lines of proprietary TypeScript code, across 1,906 files, were mirrored, forked, and torrent-distributed across the internet, never to be recalled. The repository on GitHub was forked more than 41,500 times before Anthropic could blink. Then, seven days later, Anthropic announced the most capable AI model it has ever built — a cybersecurity behemoth called Claude Mythos Preview — and launched Project Glasswing, a sweeping initiative to secure the world’s critical digital infrastructure. The company publicly described it as a watershed for global security. A watching world could be forgiven for raising an eyebrow.

History rarely serves up irony quite this rich. The firm that accidentally handed a blueprint of its proprietary agent harness to thousands of developers, threat actors, and competitors — the firm that inadvertently revealed the internal codename of its most powerful unreleased model buried in that same code — emerged days later as the standard-bearer for a new era of AI-powered cyber defence. It is, depending on your interpretation, either a masterclass in narrative control or a deeply unsettling indicator of the structural tensions now embedded in the development of frontier AI.

I. A Double Embarrassment: The Anatomy of the Leak

The facts of the Anthropic source code leak are simultaneously mundane and extraordinary. On the morning of March 31st, 2026, Anthropic pushed version 2.1.88 of its @anthropic-ai/claude-code package to the npm public registry. Buried inside was a 59.8-megabyte JavaScript source map file — a developer debugging tool that, when followed to its reference URL on Anthropic’s own Cloudflare R2 storage bucket, yielded a downloadable zip archive of the complete, unobfuscated TypeScript source for Claude Code.

Security researcher Chaofan Shou, an intern at Solayer Labs, spotted the exposure at 4:23 AM Eastern and posted a direct download link on X. It was, as The Register reported, “a mistake as bad as leaving a map file in a publish configuration” — a single misconfigured .npmignore field. A known bug in Bun, the JavaScript runtime Anthropic had acquired in late 2025, had been causing source maps to ship in production builds for twenty days before the incident. Nobody caught it.

This was, in fact, the second major accidental disclosure of the month. Days earlier, Fortune had reported on a separate leak of nearly 3,000 files from a misconfigured content management system — including a draft blog post describing a forthcoming model described internally as “by far the most powerful AI model” Anthropic had ever developed. That model’s codename: Mythos. Also, apparently: Capybara.

The March–April 2026 Anthropic Disclosure Timeline

DateEvent
~Late March 2026Fortune reports on ~3,000 leaked CMS files; first public confirmation of the Mythos model’s existence and capabilities.
March 31, 2026Claude Code v2.1.88 ships to npm with embedded source map; 512,000 lines of TypeScript exposed within hours. GitHub repository forked 41,500+ times.
March 31 – April 6Anthropic issues DMCA takedowns; threat actors seed trojanized forks with backdoors and cryptominers. Axios supply-chain attack occurs simultaneously.
April 7, 2026Anthropic officially announces Claude Mythos Preview and Project Glasswing. Partners include Apple, Microsoft, Google, Amazon, JPMorgan Chase, and others.

What the leaked source revealed was considerable: 44 hidden feature flags for unshipped capabilities, a sophisticated three-layer memory architecture, the internal orchestration logic for autonomous “daemon mode” background agents, and — critically — confirmation that a model called Capybara was actively being readied for launch. The VentureBeat analysis noted that Claude Code had achieved an annualised recurring revenue run rate of $2.5 billion by March 2026, making the intellectual property exposure a genuinely material event for a company preparing to go public.

II. Claude Mythos Preview and Project Glasswing: A Technical Step-Change

To understand why the timing of the Mythos announcement matters, one must first grasp the scale of what Anthropic is claiming. Claude Mythos Preview is not a marginal improvement on its predecessors. It occupies, in Anthropic’s internal taxonomy, a fourth tier entirely above the existing Haiku–Sonnet–Opus range — a tier the company internally designates “Copybara.” According to SecurityWeek, it represents “not an incremental improvement but a step change in performance.”

The headline claim is breathtaking in its scope. In the weeks prior to the public announcement, Anthropic ran Mythos against real open-source codebases and, according to its own Project Glasswing announcement, the model identified thousands of zero-day vulnerabilities — flaws previously unknown to software maintainers — across every major operating system and every major web browser. The oldest vulnerability it uncovered was a 27-year-old bug in OpenBSD, a system famous for its security record. A 16-year-old flaw in video processing software survived five million automated test attempts before Mythos found it in a matter of hours. The model autonomously chained together a series of Linux kernel vulnerabilities into a privilege escalation exploit — the kind of attack chain that would previously have required a sophisticated, nation-state-grade human research team.

A single AI agent could scan for vulnerabilities and potentially take advantage of them faster and more persistently than hundreds of human hackers — and similar capabilities will be available across the industry in as little as six months.

The Axios reporting on the rollout puts the dual-use risk with uncomfortable clarity: Mythos is “extremely autonomous” and possesses the reasoning capabilities of an advanced security researcher, capable of finding “tens of thousands of vulnerabilities” that even elite human bug hunters would miss. This is precisely why Anthropic chose not to release it publicly. Instead, Project Glasswing gives curated preview access to 40-plus organisations responsible for critical software infrastructure — including Amazon Web Services, Apple, Broadcom, Cisco, CrowdStrike, Google, JPMorgan Chase, the Linux Foundation, Microsoft, Nvidia, and Palo Alto Networks — backed by up to $100 million in usage credits and $4 million in direct donations to open-source security organisations including the Apache Software Foundation and OpenSSF.

The model is not cybersecurity-specific. CNBC noted that Mythos’s cyber prowess is a downstream consequence of its exceptional general-purpose coding and reasoning capabilities — a distinction with profound regulatory implications. You cannot restrict a model trained to think brilliantly about code from thinking brilliantly about vulnerabilities in that code.

III. The Deeper Meaning: Irony, Competence, and the New Security Paradigm

The central paradox demands direct engagement: Anthropic, a company whose founding proposition is responsible AI development, leaked its own product’s source code through a packaging error so elementary it required no sophistication to exploit. It then, within the same news cycle, announced an AI model so powerful its own CEO fears its public release — and positioned itself as the primary steward of global cyber defence. One is entitled to hold both thoughts simultaneously.

And yet the strategic coherence of the Mythos launch, viewed against the backdrop of the leak, is hard to dismiss entirely. Anthropic did not choose the timing. The Mythos project had been in development and partner testing for weeks before the Claude Code source code escaped its containment. But the company, having already suffered the reputational bruise of one accidental exposure too many, had an imperative to seize the narrative — to move from embarrassed leaker to principled guardian, rapidly. The result is a masterclass in what crisis communications professionals call “agenda replacement.”

The deeper issue, however, is structural and it transcends any single company. The Axios assessment is stark: Mythos is “the first AI model that officials believe is capable of bringing down a Fortune 100 company, crippling swaths of the internet or penetrating vital national defense systems.” Meanwhile, the head of Anthropic’s frontier red team, Logan Graham, told multiple outlets that comparable capabilities will be in the hands of the broader AI industry within six to eighteen months — from every nation with frontier ambitions, not just the United States. The window for getting ahead of this threat is not a decade. It is, at most, a year.

What the Mythos launch crystallises is a principle that the cybersecurity community has long understood but that corporate AI leaders and policymakers have been reluctant to internalise: the same model property that makes an AI system valuable for defence makes it catastrophically useful for offence. The technical writeup on Anthropic’s red team blog makes this explicit. Mythos can “reverse-engineer exploits on closed-source software” and turn known-but-unpatched vulnerabilities into working exploits. Gadi Evron, founder of AI security firm Knostic, told CNN that “attack capabilities are available to attackers and defenders both, and defenders must use them if they’re to keep up.” There is no asymmetry available — only the question of who moves first.

IV. The Geopolitical and Regulatory Reckoning

The implications of Anthropic Mythos extend well beyond corporate strategy. The U.S.-China AI competition has already entered the domain of active cyber operations. A Chinese state-sponsored group, as Fortune reported, used an earlier Claude model to target approximately 30 organisations in a coordinated espionage campaign before Anthropic detected and curtailed the activity. If a Claude model that predates Mythos by several capability generations was sufficient to mount a significant intelligence operation, the implications of Mythos-class capability in hostile hands are genuinely alarming.

A source briefed on Mythos told Axios: “An enemy could reach out and touch us in a way they can’t or won’t with kinetic operations. For most Americans, a conventional conflict is ‘over there.’ With a cyberattack, it’s right here.” This framing matters. The doctrine of nuclear deterrence rested partly on the difficulty of acquisition. The doctrine of cyber deterrence in the Mythos era rests on nothing — the marginal cost of deploying AI-accelerated attack capability approaches zero for any state or non-state actor with API access to a comparable model.

Anthropic’s relationship with Washington is, to put it diplomatically, complicated. The company is simultaneously briefing the Cybersecurity and Infrastructure Security Agency, the Commerce Department, and senior officials across the federal government on Mythos’s capabilities — while locked in active litigation with the Pentagon, which has labelled Anthropic a supply-chain risk following the company’s refusal to permit autonomous targeting or battlefield surveillance applications. The AI safety firm that declined to arm American drones is now, in the same breath, offering American critical infrastructure a first-mover advantage against AI-powered adversaries. The philosophical coherence of this position is defensible; its political navigation will be considerably harder.

For regulators, the Mythos announcement poses a question for which existing frameworks have no satisfying answer. The EU AI Act’s tiered risk classifications were not designed for a model that is simultaneously a breakthrough productivity tool, a national security asset, and a potential weapon of mass cyber-disruption. The Project Glasswing model — voluntary, industry-led, access-gated — is a plausible short-term mechanism. It is not a durable regulatory framework. And as Logan Graham made clear, the window before other frontier labs — and the Chinese state — reach comparable capability is measured in months, not years.


V. Verdict: A Reckoning Dressed as a Launch

Editorial Assessment

The Mythos announcement is not primarily a product launch. It is a reckoning — one that Anthropic has had the narrative dexterity to package as a strategic initiative rather than a confession. The source code leak was, at the level of operational security, an embarrassment of the first order. But it was also, unintentionally, a proof of concept for the vulnerability landscape that Mythos was built to address. Anthropic’s own systems failed a test far simpler than any that Mythos could conceivably pose to a determined adversary.

That irony is not merely cosmetic. It is instructive. No organisation — not even a frontier AI lab whose entire value proposition rests on the responsible management of powerful systems — is immune to the mundane failure modes of human error, toolchain misconfiguration, and the accumulated technical debt of moving too fast. The question is not whether Anthropic can be trusted with Mythos. The question is whether any institution, in any country, is structurally capable of managing the governance of AI capabilities that are advancing faster than the legal and regulatory architectures designed to contain them.

Dario Amodei framed the Project Glasswing rollout as an opportunity to “create a fundamentally more secure internet and world than we had before the advent of AI-powered cyber capabilities.” This is not rhetorical excess. It is, technically, accurate: the same capability that can chain together a 27-year-old kernel vulnerability into a privilege escalation exploit can, in the hands of defenders, systematically eliminate such vulnerabilities from the world’s most important software. The question is not whether this technology is transformative. It is whether the institutional infrastructure required to ensure that transformation benefits defenders more than attackers can be assembled in the time available.

Six months. Eighteen at the outside. That is the horizon Logan Graham has placed on the proliferation of Mythos-class capabilities across the industry. The global financial cost of cybercrime already runs to an estimated $500 billion annually, a figure that was compiled before any model approached Mythos’s level of autonomous vulnerability discovery. Policymakers in Washington, Brussels, and Beijing who are not currently treating this as an emergency are, as one source briefed on Mythos told Axios with commendable directness, “not remotely ready.”

Anthropic rolled out its most powerful cyber AI model days after leaking its own source code. The irony is real. So is the threat. And so, potentially, is the opportunity — if the institutions responsible for governing it can move at the speed the technology demands, rather than the speed at which governments customarily prefer to operate. History suggests that gap will be considerable. The Mythos timeline suggests that gap may, for once, be decisive.


Discover more from The Economy

Subscribe to get the latest posts sent to your email.

Continue Reading
Click to comment

Leave a Reply

AI

How AI Is Forcing McKinsey and Its Peers to Rethink Pricing

Published

on

nThe hour is up

For the better part of a century, the economics of management consulting have rested on a beautiful fiction: that the value of advice can be measured in time. An analyst’s hours, a partner’s days, a team’s weeks on site — these were the denominator around which entire firms were built, pyramids of talent whose profitability depended on billing more hours than competitors at rates clients would reluctantly accept. The fiction held because nobody had a better alternative.

Artificial intelligence has now supplied one.

The pressure is visible in the numbers, in restructured partner pay, and in the quiet desperation with which firms like McKinsey, BCG, and Bain are repositioning themselves not as advisers but as delivery partners. The consultancy industry’s pricing model — the bedrock of a $700 billion global market — is cracking. The question is not whether it will change. It already is. The question is who benefits.

A familiar disruption, an unfamiliar pace

The consulting industry has survived disruptions before. Offshoring squeezed margins in the 2000s. The post-2008 austerity wave hammered public-sector mandates. The pandemic briefly collapsed travel-dependent engagement models. Each time, the billable-hour survived, battered but intact.

This time is structurally different. What AI is compressing is not demand for advice — that remains robust — but the labour input required to produce it. The Management Consultancies Association’s January 2026 member survey found that 77% of UK consulting firms have already integrated AI into their systems, with 76% deploying it specifically for research tasks and 68% having increased automation of core workflows. Meanwhile, the global AI consulting and support services market, valued at $14 billion in 2024, is forecast to expand at a compound annual growth rate of 31.6% to reach $72.8 billion by 2030 — a trajectory that reflects how thoroughly the tools are reshaping both supply and demand.

When AI compresses the time required to produce work, hourly billing stops being a proxy for value. It becomes a liability.

The AI consulting pricing model is already shifting — and McKinsey is leading it

In November 2025, Michael Birshan, McKinsey’s managing partner for the UK, Ireland, and Israel, made an admission that would have been unthinkable five years ago. Speaking at a media briefing in London, Birshan told reporters that clients were no longer arriving with a scope and asking for a fee. Instead, they were arriving with an outcome they wanted to reach and expecting the fee to be contingent on McKinsey’s ability to deliver it. “We’re doing more performance-based arrangements with our clients,” he said. About a quarter of McKinsey’s global fees now flow from this outcomes-based pricing model.

That 25% figure is both significant and revealing — significant because it marks a genuine departure from decades of billable-hour orthodoxy, revealing because it shows that three quarters of McKinsey’s revenue remains anchored to the old model. The transition is real. It is not complete.

The driver is largely internal. McKinsey’s Lilli platform — an enterprise AI tool rolled out firm-wide in July 2023 — is now used by 72% of the firm’s roughly 45,000 employees. It handles over 500,000 prompts a month, auto-generates PowerPoint decks and reports from simple instructions, and draws on a proprietary corpus of more than 100,000 documents, case studies, and playbooks. By McKinsey’s own reckoning, Lilli is saving consultants 30% of their time on research and knowledge synthesis. When a tool saves 30% of the hours that used to justify an invoice, the invoice requires a different rationale.

BCG has pursued a parallel path. Its internal assistant “Deckster” drafts initial client presentations from structured datasets in minutes. BCG disclosed in April 2026 that roughly 25% of its $14.4 billion 2025 revenue — approximately $3.6 billion — derived from AI-related work, the first time any Big Three strategy firm has made that figure visible. Bain’s “Sage” platform performs comparable functions. PwC, which became OpenAI’s first enterprise reseller, committed $1 billion to generative AI in 2023 and subsequently deployed ChatGPT Enterprise to 100,000 employees. KPMG followed with a $2 billion alliance with Microsoft.

Collectively, the Big Four and major strategy houses poured more than $10 billion into AI infrastructure between 2023 and 2025. The investments were real. The pricing implications they’re now confronting were perhaps underestimated.

What is outcome-based pricing in consulting — and why does AI accelerate it?

Outcome-based pricing ties a consulting firm’s compensation to measurable results — revenue growth, cost reduction, market-share gains — rather than to the hours or scope of work delivered. It existed before AI, but AI transformation projects suit it naturally: they are multi-year, multidisciplinary, and generate data that makes performance tracking tractable.

As Kate Smaje, McKinsey’s global leader of technology and AI, noted in November 2025, the shift “developed over the past several years as McKinsey started doing more multi-year, multidisciplinary, transformation-based work.” AI didn’t originate the model. It made it commercially necessary.

The structural problem no press release addresses

Here is where the analysis must get uncomfortable for the firms themselves.

The productivity gains AI is generating inside McKinsey, BCG, and Bain are not, in any consistent way, being passed on to clients. One detailed analysis of MBB pricing practices published in 2025 concluded bluntly: firms’ external pricing “hasn’t moved” even as internal AI tools have displaced significant analyst labour. Clients are still paying as if junior consultants spent 80-hour weeks building the models from scratch. In many cases, Lilli or Deckster did it in an afternoon.

This creates a credibility problem that compounds over time. Sophisticated procurement teams at large corporations are beginning to ask questions about methodology, tool usage, and the provenance of deliverables. Deloitte Australia’s AU$440,000 refund to a government client over unverified AI-generated outputs — reported in 2025 — turned what had been a theoretical concern into a profit-and-loss event. Ninety percent of enterprise buyers, according to subsequent surveys, now want explicit AI governance disclosures built into contracts.

The Financial Times has reported that McKinsey is already adjusting its internal partnership economics in response, planning to shift a greater share of partner remuneration into equity as AI-driven outcome-based pricing makes consulting revenues more volatile and harder to predict quarter-to-quarter. Partners, in other words, are being asked to absorb the risk that used to sit with clients. That is a profound structural change — and one the recruitment and retention of top talent will have to accommodate.

The Amazon McKinsey Group launched in January 2026 — a joint venture combining McKinsey’s strategy capability with AWS cloud infrastructure and AI tooling — represents the most explicit attempt yet to fuse the advisory and implementation roles into a single, outcome-accountable offer. Engagements are scoped for transformations expected to deliver at least $1 billion in measurable client impact. It is a bet that scale and technology integration can justify premium fees in ways that billable hours increasingly cannot.

The counterargument: not all hours are created equal

It would be wrong to read this as consulting’s obituary. The critics of outcome-based pricing are not wrong to worry.

The model introduces its own distortions. When fees depend on measured outcomes, consultants have an incentive to define those outcomes narrowly, to work on problems whose success is easily attributable, and to avoid the ambiguous, long-horizon strategic work that generates the least data but often the most genuine value. A firm paid to raise revenue by 8% in 18 months may not tell a CEO that the business model is structurally broken. A firm paid by the hour has no such structural inhibition.

There is also the question of risk allocation. Outcome-based contracts push downside exposure onto the consulting firm, which sounds appealing to clients until they realise that firms will price that risk into their upside. McKinsey isn’t offering to share downside and cap upside. The performance-based arrangements being described are, in practice, hybrid structures — some fixed base, performance kickers on top — not pure contingency. That’s a meaningful distinction.

Sceptics within the industry point to a second problem: attribution. Did McKinsey’s intervention raise the client’s revenue, or did a favourable macroeconomic tailwind? Determining causality in complex business environments is genuinely hard, and the history of performance-based arrangements in other professional services — notably investment banking and private equity advisory — suggests that disputes over attribution tend to be costly and corrosive.

“Outcomes-based pricing didn’t start because of AI,” Smaje acknowledged in November 2025. The honest implication of that statement is that it won’t be resolved by AI either.

What firms, clients, and the talent market face next

The second-order effects of this pricing shift will ripple well beyond contract structures.

The consulting pyramid — the hierarchy of analysts, associates, managers, partners, and senior partners whose labour cost structure has remained largely stable for three decades — is under genuine pressure. McKinsey’s own research has estimated that approximately 45% of activities traditionally performed by consultants could be automated with existing technology. If Lilli handles research, synthesis, and deck generation, the case for the analyst class — the bottom of the pyramid that cross-subsidises partner economics — becomes harder to sustain.

Hiring data from 2025 suggests firms are already adjusting. The UK Management Consultancies Association survey projected 5.7% consulting revenue growth in 2026 and 7.4% in 2027, with AI services driving the greatest expansion for 66% of firms. Yet headcount growth is not tracking revenue growth — a gap that implies productivity gains are being captured by existing staff rather than expanded teams.

For clients, the shift creates genuine leverage — but only for those sophisticated enough to use it. Enterprise buyers who understand what AI can and cannot do, who can write performance metrics that are both meaningful and attributable, and who are prepared to challenge deliverable provenance will extract real value from the new model. Those who outsource that judgment to the firms themselves will find that outcome-based pricing, in practice, looks a lot like billable hours with better marketing.

The talent market will bifurcate. Consultants who can manage AI-augmented workflows, design outcome metrics, and demonstrate delivery accountability will command premiums. Those whose competitive advantage was research bandwidth and slide-deck velocity — tasks now automated at scale — face a more difficult conversation. Research published in late 2025 found that consultants using AI tools completed tasks 25% faster at 40% higher quality, but the strategic thinking, relationship management, and client judgment that justify senior fees remain, for now, distinctly human.

The tension that will define the next decade

There is a phrase circulating in elite consulting circles that captures the bind precisely: firms are being asked to be accountable for outcomes they do not fully control, using tools whose productivity gains they have not fully disclosed, in a market where clients are only beginning to understand what to demand.

The billable hour was imperfect. But it had the great virtue of simplicity: time spent, time charged. What replaces it will be messier, more contested, and more lucrative for the firms that define the terms before their clients do.

McKinsey’s quiet overhaul of partner pay is the most honest signal of what the industry privately believes: that the revenue model is becoming structurally volatile, and that the people at the top of the pyramid need to share in the uncertainty their AI tools have created. That is not a reassuring message dressed up as progress. It is a reckoning.

The hour was always a fiction. The question now is what honest accounting looks like when a machine has done the work.


Discover more from The Economy

Subscribe to get the latest posts sent to your email.

Continue Reading

Regulations

Southeast Asia Energy Shock: Economies Struggle to Cope

Published

on

On 28 February 2026, the first US-Israeli strikes on Iran effectively closed the Strait of Hormuz to normal shipping. Within six weeks, Brent crude had recorded its largest single-month price rise in recorded history, surging roughly 65 percent to above $106 a barrel. For most of the world, that was a severe financial shock. For South-east Asia — a region of 700 million people that depends on the Middle East for 56 percent of its total crude oil imports — it was something closer to a structural emergency. Governments reached for the familiar toolkit: subsidies, price caps, rationing. It isn’t working.

The timing is particularly brutal. South-east Asia had entered 2026 on what looked like solid ground. The region had weathered US tariffs better than feared; export front-loading and resilient private consumption kept growth humming at roughly 4.7 percent across developing ASEAN in 2025. Inflation was subdued. Central banks had room to manoeuvre.

That cushion is now gone.

The World Bank’s April 2026 East Asia and Pacific Economic Update projects regional growth slowing to 4.2 percent this year, down from 5.0 percent in 2025, with the energy shock explicitly cited alongside trade barriers as a primary drag. The IMF, for its part, forecasts that inflation across emerging Asia will climb from 1.1 percent in 2025 to 2.6 percent in 2026 — a projection that assumes the most acute phase of supply disruption ends by May. Few analysts believe it will.

The Southeast Asian Energy Shock: What Hit, and Why It Hurts So Much

The mechanism is straightforward, even if the scale is not. The Strait of Hormuz — a 33-kilometre passage between Iran and Oman — serves as the transit point for roughly 20 percent of the world’s daily seaborne oil and up to 30 percent of global LNG shipments. When that artery seizes, South-east Asia feels it fastest. The region imports nearly all of its crude; it holds strategic reserves measured in weeks, not months. Most ASEAN economies sit on fewer than 30 days of emergency oil stocks. The Philippines and Thailand are exceptions, with roughly 45 and 106 days respectively — still a narrow buffer against a conflict that US officials privately suggest could persist through year-end.

The impact of the Southeast Asian energy shock has been immediate and sharp. According to an analysis by JP Morgan cited widely across regional media, the Philippines declared a national energy emergency after gasoline prices more than doubled. Indonesia and Vietnam introduced fuel rationing. Thailand’s fisheries sector — an industry that generates billions in export revenue and employs hundreds of thousands — began shutting down as marine diesel costs became unviable.

The fiscal arithmetic compounds the pain. Fossil fuel subsidies across five major ASEAN economies — Indonesia, Malaysia, Thailand, Vietnam, and the Philippines — reached $55.9 billion, or 1.3 percent of combined GDP, in 2024, before the current crisis. Indonesia alone spent the equivalent of 2.3 percent of GDP on explicit fuel price support. Now, with Brent crude above $100 and the World Bank’s commodity team forecasting an average of $86 a barrel across 2026 even in a best-case recovery scenario, those subsidy bills are rising faster than governments budgeted for.

The ASEAN Economic Community Council convened an emergency session on 30 April 2026, held by videoconference, in which ministers cited “growing instability along key maritime routes” as driving volatility in energy prices and sharply increasing freight, insurance, and logistics costs. The communiqué warned of spillover effects on food security and business confidence, particularly for small and medium enterprises — the backbone of most ASEAN economies.

Why Policy Options Are Narrowing — and Who Is Most Exposed

The question South-east Asian governments face isn’t whether the energy shock hurts. It’s whether they have enough fiscal and monetary space to absorb it.

The answer varies sharply by country, and understanding those differences matters for anyone assessing the ASEAN investment landscape.

Which Southeast Asian countries are most vulnerable to oil price spikes? Thailand and the Philippines face the gravest pressure. Both import nearly all their fuel, lack meaningful commodity export revenue to offset higher import bills, and carry domestic vulnerabilities — elevated household debt in Thailand, structural current-account exposure in the Philippines — that amplify the macro damage. Indonesia and Malaysia are better insulated: coal exports and palm-oil revenues provide a partial natural hedge, and their domestic energy production reduces import dependency. Vietnam sits somewhere in between, with growing industrial exposure but a more activist state ready to deploy price stabilisation funds.

Thailand’s predicament illustrates the bind. The country’s National Economic and Social Development Council reported GDP growth of 1.9 percent year-on-year in the first quarter of 2026, well below the government’s own 2.6 percent projection, even as tourist arrivals held firm. The Oil Fuel Fund empowers Bangkok to subsidise pump prices during international oil spikes — but that mechanism has a fiscal cost, and with the budget already stretched, sustaining it without cutting other expenditure is a genuine political and economic dilemma. The World Bank forecast that Thailand’s full-year growth will slow to just 1.3 percent in 2026, down from 2.4 percent last year — the weakest major economy in the region by a significant margin.

Central banks are caught in a similar bind. The IMF’s Andrea Pescatori put it plainly in April: the energy shock is “raising inflation, weakening external balances, and narrowing policy options.” Cutting rates to support growth risks stoking inflation and pressuring currencies already weakened by the dollar’s safe-haven surge. Raising rates to defend currencies risks tipping fragile economies into contraction. The Philippine peso and Thai baht have both depreciated this year, which means the energy shock arrives at an exchange rate that makes every dollar-denominated barrel of oil cost even more in local terms.

That is not a problem easily subsidised away.

Implications: Fiscal Strain, Food Prices, and the Coal Comeback

The second-order effects of the ASEAN oil crisis are where the real long-term damage accumulates.

The most immediate downstream risk is food inflation. Higher marine fuel costs don’t just shut down Thailand’s fisheries; they push up the price of fish for 70 million Thais and complicate the region’s food-export economics. Fertiliser prices — heavily tied to natural gas — are rising in parallel. Vietnam, a major rice and agricultural exporter, is watching input costs erode margins across its farm sector. Thailand, according to reports cited in regional media, is even exploring fertiliser purchases from Russia to manage costs — a geopolitical trade-off that puts ASEAN countries in an awkward position as the EU and US press them to limit economic lifelines to Moscow.

Then there’s the energy mix reversal. Vietnam and Indonesia are re-optimising towards coal to reduce LNG import dependence — a rational short-term response that directly undermines both countries’ climate commitments and their eligibility for concessional green finance. The IEA’s 2026 Energy Crisis Policy Response Tracker documents this shift across multiple Asian economies, noting a wave of emergency fuel-switching from gas to coal-powered electricity generation.

For businesses, the pressure is both direct and indirect. Singapore Airlines reported a 24 percent increase in fuel costs year-on-year in recent filings, a squeeze that hits one of the region’s most profitable and strategically important carriers. Logistics firms across the region are repricing contracts, with knock-on effects for the export-oriented manufacturers in Vietnam, Malaysia, and Thailand who depend on predictable freight rates to compete in global supply chains.

The Asian Development Bank’s April 2026 Outlook projects inflation across developing Asia rising to 3.6 percent this year, as higher energy prices feed through to consumer prices. For the urban poor across Manila, Bangkok, and Jakarta, who spend a disproportionate share of income on transport and food, that number translates into a genuine fall in real living standards.

The Case for Optimism — and Why It’s Incomplete

It would be unfair to write off ASEAN’s resilience entirely. The region has navigated severe external shocks before — the Asian financial crisis of 1997, the global financial crisis of 2008, the Covid-19 supply chain fractures of 2020–21 — and each time it emerged with stronger institutional frameworks and deeper reserve buffers.

The OMFIF notes that ASEAN+3 entered 2026 from a position of relative strength, with growth of 4.3 percent in 2025 and inflation at just 0.9 percent — conditions that gave central banks some room to absorb a supply shock without immediately tightening. Several governments are using the crisis to accelerate structural shifts that were already overdue: Indonesia is pushing its B50 biodiesel programme, blending palm-oil biodiesel with conventional diesel to reduce petroleum imports. Vietnam is expanding petroleum reserves and evaluating renewable energy deployment. Malaysia is prioritising industrial upgrading.

Some economists argue, too, that the region’s AI-related export boom — identified by the World Bank as a “bright spot” in 2025, particularly in Malaysia, Thailand, and Vietnam — provides a partial growth offset that didn’t exist in previous energy shock episodes. Semiconductor and electronics exports are less fuel-intensive than traditional manufacturing, offering a degree of natural hedge.

Yet this optimism has limits. Most of the structural diversification being contemplated operates on timescales of years, not months. Biodiesel programmes and renewable energy buildouts don’t lower this quarter’s fuel bill. And the fiscal space being consumed by subsidy programmes today is space that won’t be available for infrastructure investment, healthcare, or education tomorrow. Analysts at Fulcrum SGP, reviewing the region’s policy responses, concluded that “the reactive nature of most policy responses risks locking the region into structural fragility” — a diagnosis that captures the fundamental tension between managing the immediate crisis and building long-term resilience.

The Reckoning That Keeps Getting Deferred

South-east Asia’s energy vulnerability didn’t begin on 28 February 2026. For decades, the region’s economies grew rapidly on a diet of cheap imported oil, building infrastructure and industrial capacity calibrated to abundant fossil fuels and open sea lanes. The Hormuz closure has made visible what was always structurally true: that a region of 700 million people, with combined GDP approaching $4 trillion, had built its prosperity on a supply chain that runs through a 33-kilometre passage controlled by a third party.

Governments are responding, as governments do, with the instruments closest to hand — subsidies, rationing, emergency reserves. Those measures will blunt some of the pain. They won’t resolve the underlying architecture.

The World Bank’s Aaditya Mattoo put the challenge with unusual directness in launching the April update: “Measured support for people and firms could preserve jobs today, and reviving stalled structural reforms could unleash growth tomorrow.” The operative word is “stalled.” The reforms — energy diversification, grid integration, renewable deployment — were the right answer before the crisis. They remain the right answer during it. The distance between knowing that and doing it, at pace and at scale, is where South-east Asia’s next decade will be decided.

The Strait of Hormuz may reopen. The structural exposure won’t close itself.


Discover more from The Economy

Subscribe to get the latest posts sent to your email.

Continue Reading

Analysis

SpaceX, OpenAI & Anthropic IPOs: Wall Street’s $200B AI Test

Published

on

Three companies that defined the private-market boom are converging on public markets at the same moment, carrying combined valuation targets that dwarf anything Wall Street has processed before. Whether that’s a catalyst or a crowding-out event depends entirely on your faith in AI’s ability to monetise at scale.

On June 12, if the roadshow holds, Elon Musk’s SpaceX will begin trading on the Nasdaq under the ticker SPCX at a valuation the company’s own S-1 filing implies could exceed $1.75 trillion — making it, at listing, the third-largest public company in the United States, behind only Apple and Nvidia, despite an accumulated deficit of $41.3 billion and a net loss of $4.94 billion in 2025 alone. That would be the largest initial public offering in history. By a substantial margin. Then comes Anthropic, eyeing an October debut that could price it at or above $900 billion. Then, perhaps, OpenAI — still deliberating, still burning cash at $14 billion a year, still the most widely recognised consumer AI brand on the planet.

The sequence, compressed into a single calendar year, represents something the US capital markets have never encountered: a near-simultaneous rush by the three most valuable private technology companies in the world, each carrying the weight of an entire investment cycle, each demanding that public investors accept loss-making balance sheets in exchange for a front-row seat to the AI revolution.

A Pipeline Without Modern Precedent

To understand the scale of what’s approaching, consider the baseline. According to new Crunchbase data, investors poured approximately $300 billion into roughly 6,000 startups globally in Q1 2026 alone — the biggest quarter for venture capital on record — with roughly 80% of that capital flowing into AI-linked companies. The pipeline feeding Wall Street is, in other words, still swelling.

Yet the IPO exit window has remained selectively narrow. Global listings totalled $171.8 billion across 1,293 deals in 2025, a 39% rise in proceeds year-over-year, but the era of the frictionless mega-debut remains a memory of 2021. The early months of 2026 were, in the words of Crunchbase research lead Gené Teare, “much slower than was expected.” Based on mid-point valuation estimates, the combined fundraising from SpaceX, OpenAI, and Anthropic could approach $200 billion — more capital than all US listings raised collectively between 2022 and 2025. That is not a pipeline. It’s a flood.

At a Glance — The Three Deals

SpaceX (SPCX): June 12 Nasdaq listing, $1.75T target valuation, $75B raise, 21-bank syndicate led by Goldman Sachs. S-1 filed publicly May 20.

Anthropic: October 2026 target, ~$900B valuation, ~$60B raise. Goldman Sachs and JPMorgan in early lead-bank discussions. No S-1 filed.

OpenAI: Late Q4 2026 or 2027 window. $852B post-money valuation from March 2026 round. CFO Sarah Friar has flagged organisational readiness as the binding constraint.


SpaceX, OpenAI and Anthropic IPOs: The What and the Why

The SpaceX, OpenAI and Anthropic IPO wave didn’t arrive suddenly. It was built over four years of private fundraising that kept these companies out of public hands precisely because they could. Now, each faces a different version of the same pressure: the cost of building frontier AI infrastructure has become too large to finance from private capital alone.

SpaceX moved first. The company confidentially filed its S-1 with the SEC on April 1, 2026, under the internal codename Project Apex, assembling a 21-bank syndicate with Morgan Stanley, Goldman Sachs, JPMorgan, Bank of America, and Citi in lead roles. The public S-1 landed May 20. The filing disclosed $18.67 billion in consolidated 2025 revenue following the February 2026 all-stock acquisition of xAI, which valued the combined entity at $1.25 trillion before the IPO rerating began. Adjusted EBITDA came in at $6.58 billion, but the GAAP picture is less comfortable: an operating loss of $2.59 billion and a net loss of $4.94 billion.

The filing’s headline number — that $1.75 trillion target valuation — implies a price-to-sales ratio in the range of 94 times 2025 revenue. For context, that is higher than Tesla’s multiple at its 2010 IPO, and higher than nearly every other publicly-traded company today. If SpaceX prices at the top of its reported range, it would join Apple and Nvidia in the $2 trillion club on day one.

Still, the bull case isn’t without grounding. Starlink, the company’s satellite broadband operation, generated Starlink’s $11.4 billion in revenue in 2025 — 61% of consolidated sales — growing at 49.8% year-over-year against a 63% EBITDA margin. That’s a broadband business with a $28.5 trillion total addressable market, per the S-1’s own sizing (excluding China and Russia). The xAI segment is the drag: it posted a $2.47 billion operating loss in Q1 2026 alone, and the Grok chatbot faces regulatory investigations across eight agencies connected to nonconsensual synthetic imagery. Retail investors have been allocated 30% of the offering — roughly $22.5 billion at the reported raise target — three times the standard for a deal of this size. Musk won’t sell a single share.

Three Floats, Three Distinct Propositions — and One Structural Question

Strip away the headline valuations and the three companies offer public market investors fundamentally different risk-return profiles, despite sharing a single narrative.

SpaceX is, at its core, a cash-generative satellite business stapled to a money-losing AI division and a launch operation that reinvests nearly everything it earns. The Starlink segment is real, profitable, and growing fast. The xAI bet — that an AI-driven data centre and chatbot business can scale to justify the combined $1.75 trillion price tag — is less provable. The dual-class share structure gives Musk 85.1% of combined voting power through Class B shares carrying ten votes apiece. His performance grant of approximately 1.3 billion shares vests on conditions that include building a Mars colony of one million people. That is not, strictly speaking, a standard clause in a prospectus.

“Once you go public, companies can no longer cherry pick what pieces of information they want to disclose.”

— Minmo Gahng, Professor of Finance, Cornell University

Anthropic’s annualised revenue model occupies the most investor-friendly corner of the three. Its annualised revenue run rate expanded from $9 billion at the end of 2025 to over $30 billion by April 2026, with approximately 80% of that revenue derived from enterprise customers — the stickiest, most contractual segment of the AI demand stack. Amazon and Google between them have committed more than $70 billion in equity and cloud infrastructure, giving Anthropic a structural cost advantage that OpenAI’s $14 billion projected loss and more diversified investor base can’t easily replicate. CNBC reported this week that Anthropic is set to hit $10.9 billion in quarterly revenue in Q2 2026, and the company expects to break even by 2028 — roughly two years ahead of OpenAI’s own guidance.

Will OpenAI IPO in 2026? The answer, as of May 2026, is probably not on the terms Sam Altman originally envisaged. OpenAI’s CFO Sarah Friar has privately told industry insiders that conditions for a listing won’t be met before the end of the year; the organisational and process work isn’t finished. The company closed a $122 billion funding round in March at an $852 billion post-money valuation — the largest private financing in Silicon Valley history — but it’s projected to lose $14 billion in 2026 and doesn’t expect profitability until 2029 or 2030. HSBC analysts estimate OpenAI may require more than $207 billion in additional funding by 2030. The most likely listing window is late 2026 or early 2027, contingent on the S-1 process and the resolution of ongoing litigation with Elon Musk.

What the AI IPO Wave Means for Markets, Investors, and the Broader Tech Ecosystem

The market-absorption question is the one that serious investors keep returning to. Can Wall Street digest $200 billion in new AI-linked equity issuance in a single year without distorting the valuations of every other technology company already trading?

The evidence on crowding-out effects is mixed. The more immediate risk is sequencing. SpaceX’s June listing arrives at a moment when the Nasdaq is already processing the aftermath of the “SaaSpocalypse” — a wave of pulled or delayed smaller-tech offerings that dampened early 2026 enthusiasm — and when the chipmaker Cerberus (CBRS) has just demonstrated both the ferocity of AI demand (its stock rose 68% on debut) and its fragility (it dropped 10% the following session). SpaceX enters that environment as the definitional mega-cap, which means passive index funds will be forced to acquire shares regardless of governance concerns if, as reported, Nasdaq index providers prepare for rapid post-IPO inclusion. That mechanical demand could insulate the stock price from early sell-off pressure, but it also concentrates governance risk in the hands of precisely the investors least able to act on it.

For the broader AI ecosystem, the listings carry a second-order implication that goes beyond the IPO proceeds themselves. Minmo Gahng, a professor of finance at Cornell University, has noted that while these companies have booming revenue, they’re not likely to be profitable in the near future because they’re spending so much on hardware. Public market discipline — quarterly reporting, SEC disclosures, institutional shareholder scrutiny — will force each company to defend its cost structure in ways private investors never required. That is structurally healthy for an industry whose capital deployment has largely escaped independent audit. It may, however, also slow the hiring cycles and compute buildouts that have sustained the current pace of model advancement.

The long cycle has one other notable winner: early-stage venture capital. The gains that have accrued inside these three companies — over two decades of compounding in SpaceX’s case — will now crystallise for a relatively small number of private investors and VC firms. The public markets will absorb the next decade of dilution.

The Case Against the Frenzy

It would be journalistically convenient to frame these three listings as the inevitable triumphant public moment of the AI generation. The countercase is worth stating clearly, because it’s more than the usual IPO-cycle caution.

Start with the valuations. At $1.75 trillion, SpaceX carries a price-to-sales multiple exceeding 80 times, a figure that has already prompted warnings of valuation bubble signals from analysts tracking the deal. The last time US markets absorbed an IPO at this scale of ambition-to-earnings divergence was during the dot-com era. That cycle produced genuine value — Amazon and Google are testament to that — but it also produced spectacular wreckage for investors who arrived at the party after the sophisticated money.

The picture is more complicated than pure bubble rhetoric, though. These aren’t pre-revenue visions. SpaceX had $18.67 billion in consolidated revenue in 2025. Anthropic is on track for annualised revenue above $40 billion by mid-2026. OpenAI’s ChatGPT serves 900 million weekly active users. The revenue curves are real. The question is whether the capital requirements to maintain competitive position in frontier AI — SpaceX’s planned $20.7 billion annual capital expenditure puts it in the same bracket as Meta, Alphabet, and Microsoft — are compatible with the profitability trajectories these valuations imply.

Jay Ritter, an economist at the University of Florida who has studied IPO markets for decades, drew an instructive parallel when Netscape went public in 1995 — barely a year old — and Wall Street went, in his words, “bonkers.” That kicked off the dot-com boom. SpaceX is 24 years old, OpenAI is ten, and Anthropic is five. All three have mature operations. The difference is that the gains have already accrued to private investors. Public buyers are arriving at a more expensive party.

There is also the governance question, which few mainstream commentators have pressed hard enough. Musk’s 85.1% voting control post-listing effectively means that the $75 billion in public equity being raised buys no meaningful oversight. Institutional investors who have spent a decade demanding better governance structures at portfolio companies will be asked to accept a prospectus in which the CEO’s compensation vests on Mars colonisation milestones. The controlled-company exemptions SpaceX intends to claim remove most of the standard investor-protection provisions. Whether that’s a deal-breaker or just a feature of investing in a Musk-controlled entity is a question each institution will have to answer for itself.

The deeper tension at the centre of all three offerings isn’t about valuations or governance structures or even profitability timelines. It’s about what public markets are actually being asked to price. These aren’t companies with a product, a market, and a cash flow model that analysts can comfortably triangulate. They’re bets on the proposition that artificial intelligence will be, over the next decade, the most consequential and value-accreting technology transition in economic history — and that SpaceX, OpenAI, and Anthropic, rather than some combination of incumbents and as-yet-unfounded challengers, will capture the majority of that value.

That’s not a crazy bet. It may be the right one. But it’s a bet that belongs on a venture term sheet, not in the index fund that quietly holds your pension.

The roadshow starts in two weeks. Bring your own conviction.


Discover more from The Economy

Subscribe to get the latest posts sent to your email.

Continue Reading

Trending

Copyright © 2025 The Economy, Inc . All rights reserved .

Discover more from The Economy

Subscribe now to keep reading and get access to the full archive.

Continue reading