Researcher: OpenAI paid just $300 for a bug granting free access to paid models
NathanpmYoung · x · 2026-10-08
- Security researcher @OliverFish disclosed a bug that granted free access to OpenAI's paid models with no API key or account — and the bounty was only $300.
- He says there's "zero reason" to report anything else he finds to OpenAI, arguing the reward is wildly out of proportion to the bug's value.
- Chris Lakin amplified it, publicly asking OpenAI what the bottleneck is to paying bounties proportional to value, sparking debate over big-lab bug bounty programs.
Related event: Researcher Grumbles as OpenAI Pays Only $300 for No-Auth Bug(2 posts)→
More from Safety
- Corridor hosts NYC meetup next week on securing agentic coding — jefrankle · 2026-10-08
- NSA spending billions of dollars a year testing frontier AI models, sources say — coherence · 2026-10-08
- Account hijacked despite 2FA: victim urges passkeys, as teortaxesTex pitches always-on agents for email alerting — teortaxesTex · 2026-10-08
- Humans can't scale AI policy alone; agents must help build institutions — jacyanthis · 2026-10-08
- Anthis: human–AI relationship case studies are today's most important data — jacyanthis · 2026-10-08
- Epistemic re-entry: local competence doesn't guarantee end-to-end corrective competence in AI — blessedfortherest · 2026-10-08