Science Real money Open source

An AI bug-bounty pipeline earned $5,000 while its owner did nothing

Adam Shao chains an AI that picks the target, Flounder, an open-source vulnerability hunter on GitHub, that finds the bug, and Codex with Computer Use that files the report. A $5,000 bounty arrived without Adam ever reading the finding.

View on X
464likes
39reposts
499saves
45Kviews
Made with
GPT-6 Astra, Codex, Flounder
Posted
Adam Shao@AdamShao

My bug bounty workflow in 2026:

→ AI finds the target
→ Flounder finds the bug
→ Codex + Computer Use files the report
→ I do absolutely nothing
→ $5,000 bounty hits

I still have no idea what the bug was.

View on X
Image 1 of 1 from the post

From the post it quotes.

More in Science

An immunologist's own flow cytometry app replaced paid lab softwareScience@DeryaTR_1.5K205743
Thirty games where two models negotiated to avoid civil warScience@spakhm1.5K114719
A robot's phone video became a full-dynamics digital twin in an hourScience@keplerccccc41849314
AI proving classic distributed-systems protocols in TLA+Science@tianyin_xu27635231