Article Content
- •OpenAI's bug bounty rewards now reach up to $172,000 with bonuses.
- •Base rewards for critical vulnerabilities have increased to $30,000.
- •A new five-tier loyalty program incentivizes repeat researchers.
OpenAI has significantly increased its bug bounty rewards, offering up to $172,000 for exceptional critical findings. The new payout structure includes base rewards of up to $30,000 for critical vulnerabilities in core products like ChatGPT and Codex, with additional bonuses for high-quality reports and loyalty. The company aims to encourage independent researchers to identify vulnerabilities that may have been overlooked. The updated program also introduces a five-tier loyalty system and short-term campaigns with dedicated bonus pools for testing new features. This overhaul comes as OpenAI seeks to enhance its security posture and foster collaboration with the research community. Reports indicate that this move aligns OpenAI's rewards with those of major players like Google, though it remains below the top-tier payouts offered by Apple and Microsoft.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track OpenAI in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What is the maximum bounty for critical vulnerabilities?
How does the new loyalty program work?
Will previous submissions be adjusted to the new payout rates?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…