原标题：Bug hunters can now earn up to $172,000 from OpenAI as company ramps up security
OpenAI 宣布漏洞赏金总额提高四倍，ChatGPT 或 Codex 等核心产品的严重漏洞最高可获 3 万美元，特殊发现可达 10 万美元，加上质量、忠诚度和活动奖金总计约 17.2 万美元。新增五级忠诚度计划和随新功能上线推出的限时加赏活动，近 30 天内提交报告者可按新旧费率差额追溯补发。OpenAI 还将与安全公司 Cathedral 合作进行安全冲刺，上一次冲刺中 25% 的产品工程师参与了漏洞排查。
原文给出具体赏金数字、层级机制和安全冲刺安排，可与 Google、Apple 等项目作横向比较。
本页的摘要、推荐理由与解读出自 AIsa Studio 的 AI 风向智能体，原文版权归原作者所有。
OpenAI quadruples bug bounty payouts and launches new internal security sprint. Critical vulnerabilities in core products like ChatGPT or Codex now earn outside researchers up to $30,000, the company announced. Exceptional findings can net up to $100,000, and with quality, loyalty, and campaign bonuses, the total can reach roughly $172,000.
That puts OpenAI in the same ballpark as Google's general vulnerability rewards program, though still below the top-tier payouts Apple or Microsoft offer for OS-level exploits. New additions include a five-tier loyalty program and time-limited campaigns with boosted payouts tied to new feature launches. Anyone who reported a vulnerability in the last 30 days will get the difference between the old and new rates retroactively.
Alongside the bounty overhaul, OpenAI is preparing a security sprint where the security firm Cathedral will team up with OpenAI's own engineers to stress-test its systems. During the last sprint, 25 percent of OpenAI's product engineers worked on finding vulnerabilities, according to the company.
Subscribe to THE DECODER for ad-free reading, a weekly AI newsletter, our exclusive "AI Radar" frontier report six times a year, full archive access, and access to our comment section.
原文版权归 The Decoder 及原作者所有，本站转载仅供阅读。如需删除，请联系 support@aisa.one。
2026 年 11 月 3 日，OpenAI 宣布计划启动下一轮内部安全冲刺，并与安全公司 Cathedral Systems 合作，由其研究人员使用 OpenAI 模型与内部团队一起挑战自身防御、用 AI 查找和修复弱点。同时，OpenAI 上调了漏洞赏金：严重/关键漏洞奖励提高逾四倍，特别出色的发现含各类奖金最高可达约 17.2 万美元。其中主报道（OpenAI）与跟进报道（The Decoder、r/OpenAI）的具体表述存在差异：主报道和 r/OpenAI 称关键/严重漏洞奖励提高逾四倍、优秀发现含奖金最高 17.2 万美元；The Decoder 则称赏金总额提高四倍，ChatGPT 或 Codex 等核心产品的严重漏洞最高 3 万美元、特殊发现可达 10 万美元，加上质量、忠诚度和活动奖金总计约 17.2 万美元。The Decoder 还报道了新增的五级忠诚度计划、随新功能上线推出的限时加赏活动，以及近 30 天内提交报告者可按新旧费率差额追溯补发。关于上一轮冲刺，报道称有 25% 的产品工程师参与漏洞排查，用 Codex 复现漏洞并准备补丁。此外报道称，OpenAI 将向 Daybreak 客户提供六个月 10 亿美元的补贴访问以支持一线防御者；下一轮冲刺的具体开始时间尚未确定。
Studio