Claude couldn't hack OpenAI. Then Anthropic shipped Opus 5

helsinkiandrew

So it went: > HEIF upload → libheif overflow → code execution on the forum → over-permissioned SSO tokens → employee ChatGPT/Codex account → connected GitHub → pull request in openai/openai Server side bounties aren't that profitable though: > A two-month project, under $3,000 in model tokens .... OpenAI paid Hacktron a $6,500 bounty for the account-takeover flaw on its side. The ideal hacker workflow would be to gain access to an account or system with model access which you can use for further hacks.