Hacktron AI researchers used Claude to exploit OpenAI vulnerabilities, earning $6,500 bug bounty

OpenAI paid $6,500 after the team disclosed chained vulnerabilities found with AI assistance.

10 Sources, 20d ago, first seen 20d ago

TLDR

Researchers from Hacktron used Anthropic's Claude to exploit a libheif image library issue and sign-in token misconfiguration. They accessed OpenAI employee accounts and internal GitHub repository within 72 hours at a cost of under $3,000 in tokens. The team disclosed the findings privately. OpenAI patched the issues in 14 hours and paid a $6,500 bug bounty. Reports state the weaknesses were not AI-related flaws.

Today's Rank

—

Not ranked yet

Combined views

139.2K

10 Sources, first seen 20d ago

5.6K likes81 comments253 saves238 reposts

Sentiment

Positive36.6%63.4%Negative

Summary

Many accounts criticized OpenAI’s $6,500 bug bounty as too low for the critical flaws found by Hacktron researchers, while others praised the responsible disclosure and Indian talent involved.

Based on 70 sentiment-bearing replies from 65 accounts across 5 conversations.

Featured Source