Claude couldn't hack OpenAI. Then Anthropic shipped Opus 5 Posted by stared on Saturday September 19, 2026 @02:52AM from the thenewstack.io dept. https://thenewstack.io/claude-exploits-openai-forum/ ( 1 comment | 6 points | on HN )
> HEIF upload → libheif overflow → code execution on the forum → over-permissioned SSO tokens → employee ChatGPT/Codex account → connected GitHub → pull request in openai/openai
Server side bounties aren't that profitable though:
> A two-month project, under $3,000 in model tokens .... OpenAI paid Hacktron a $6,500 bounty for the account-takeover flaw on its side.
The ideal hacker workflow would be to gain access to an account or system with model access which you can use for further hacks.