Bug Bounty is a topic tracked in our intelligence system with 5 linked articles.
July crypto hacks totaled about $110 million; Immunefi claims its bug-bounty audits outperformed tier-1 audits.
BTCPay Server will pay up to 3 BTC as a recovery bounty after a critical exploit, with AI-assisted exploitation suspected and Craig Raw plus the Bitcoin Red Team fund credited for reporting.
Google paid $250k for reporting a Linux KVM guest-VM escape (CVE-2026-53359) with a proof-of-concept, while a second vulnerability GhostLock earned $92k; both have patches in the Linux kernel and pose cloud-virtualization isolation risks.
Headline alleges AMD stiffed a researcher by offering a $10k bug bounty.
Security researcher bypassed AWS HTTP API Gateway auth by exploiting trailing slash handling, exposing full account data and enabling transfers without a valid JWT; received a $12k bounty; fintech patched by tightening path matching, validating userId on all endpoints, and shifting to REST API.
Firefox deployed an AI-assisted hardening pipeline using Claude Mythos Preview, surfacing hundreds of security bugs (271 via Mythos, 423 total fixed in April) and tying fixes to CVEs while outlining a scalable workflow and CI integration.
Subscribe for real-time topic updates and unlimited access to our intelligence platform.