Meta offers up to $300k bounties for Muse agent bugs as researchers slam OpenAI's $300 payouts

NathanpmYoung · x · 2026-10-08

Meta published dedicated bug bounty guidelines for Muse, its personalized AI agent, with payouts up to $300,000. Each Muse runs in a per-user VM with access to email, calendar, messaging, and third-party accounts, guarded by four controls: VM isolation from Meta production, credential protection (no plaintext secrets), egress control, and human-in-the-loop approval.

Tiers: pivoting from Muse into Meta production pays up to $300k; control plane compromise or cross-tenant access up to $250k; compromising a single user's agent up to $130k. In contrast, researcher @OliverFish complained OpenAI offered only $300 for a bug granting free access to paid models without an API key, saying he has no incentive to report more.

Original post →

More from Companies & People

Companies & People channel →