OpenAI more than quadruples bug bounty rewards, up to $172,000, and taps Cathedral for security sprint
Critical bugs in ChatGPT, Codex or the API now pay up to $30,000 base. OpenAI pairs the bigger payouts with a model-driven internal security sprint and $1 billion in subsidized access for cyber defenders.
TL;DR
- OpenAI said on Nov. 2, 2026 it is more than quadrupling the midpoint of its bug bounty reward ranges for medium, high and critical findings on average.
- A critical bug in a core product such as ChatGPT, Codex or the API Platform now earns up to $30,000; exceptional findings can reach up to $172,000 with bonuses.
- New quality multipliers, a five-tier loyalty program and priority campaigns add bonuses; bounties paid in the prior 30 days get topped up retroactively.
- OpenAI is also preparing its next internal security sprint with security firm Cathedral and has committed $1 billion in subsidized model access for frontline defenders over six months.
OpenAI is paying hackers a lot more to break its products first. The company said on Nov. 2, 2026 that it is more than quadrupling the midpoint of its bug bounty reward ranges for medium, high and critical findings on average, and published examples showing a top payout of $171,925.
The new price list
A critical vulnerability in a core product such as ChatGPT, Codex or the API Platform now earns up to $30,000, OpenAI said. Exceptional critical findings remain eligible for up to $100,000 base and can now reach up to $172,000 with bonuses, Help Net Security reported.
The bonuses stack. High-quality reports with a reliable proof of concept get a quality multiplier, a new five-tier loyalty program rewards repeat researchers, and short-term priority campaigns add bonus pools for newly launched features. In OpenAI's own example, a one-click ChatGPT account takeover that previously paid $6,500 would now pay $51,577.
Pending reports will be paid under the new ranges. For bounties awarded in the 30 days before the announcement, OpenAI says it will pay the difference.
AI hunting bugs in AI
In a second post, OpenAI said it is preparing its next internal security sprint with security firm Cathedral, whose researchers will use OpenAI's models alongside its teams to challenge its defenses. In the last sprint, OpenAI dedicated 25% of its product engineers to finding and fixing weaknesses, using Codex to reproduce vulnerabilities and prepare patches.
"Traditional cyber defenses alone are no longer sufficient," OpenAI wrote. It said it has committed $1 billion in subsidized access over six months for frontline defenders protecting essential services and digital infrastructure.
What it means for Web3 teams – Analysis
When an AI lab that can point frontier models at its own code still raises outside bounties more than fourfold, it is admitting that internal testing misses things. Crypto teams sit on far more direct value per bug. If a critical web2 bug is now worth up to $172,000, a bounty that is small relative to a protocol's TVL is an open invitation to sell the bug elsewhere. Teams should price bounties against what an exploit could actually drain and pay fast. This is not investment advice.
FAQ
How much does OpenAI now pay for bugs?
A critical vulnerability in ChatGPT, Codex or the API Platform earns up to $30,000. Exceptional critical findings are eligible for up to $100,000 base and up to $172,000 with bonuses.
What bonuses are new?
Quality multipliers for strong proof-of-concept reports, a five-tier loyalty program and priority campaigns with bonus pools for newly launched features.
Are past reports covered?
Unpaid reports get the new ranges, and bounties awarded in the 30 days before the Nov. 2, 2026 announcement are topped up if they would have earned more.
What is the Cathedral security sprint?
OpenAI's next internal security sprint, in which researchers from security firm Cathedral will use OpenAI's models with its teams to test its defenses.
Sources
News summary based on the sources above. Not investment, legal or tax advice. Editorial policy & corrections · Report an error
Building in Web3? Turn the news into trust.
Positioning, KOL programs, LinkedIn systems and claim-safe content for Web3 and fintech teams.
Related
OpenAI launches GPT-6 Cyber, its first 'Critical' cyber model, for vetted red teams only
The model scores 48.5% on ExploitGym, found 81 high-severity Firefox bugs and, OpenAI says, stayed in scope in 99.93% of honeypot tests. Access is limited to approved Daybreak Red customers.
OpenAI pledges to pay full power costs and drop NDAs with officials after voters reject data centers
Two days after voters backed data center restrictions in 40 of 41 local ballot measures, OpenAI published a National Community Compact and asked lawmakers to turn similar rules into law.
OpenAI buys Pierre, Meta buys Conductor: big labs absorb AI coding tools in one day
Both deals were announced on Nov. 4, 2026. Pierre's Code Storage will fold into Codex; Conductor stops sign-ups and deletes cloud data from Nov. 20, 2026.