Hacktron researchers ethically compromise OpenAI with Claude’s help and collect a bounty
The Guardian and SecurityWeek reported on September 18, 2026 how Hacktron chained a Discourse/libheif flaw with an OpenAI SSO bug, used Claude to build the exploit, opened a harmless PR in the internal monorepo, and received about $6,500 in bounty.