US cybersecurity researchers at Hacktron AI hacked OpenAI. They used Anthropic’s Claude chatbot to start the process. They accessed OpenAI employees’ ChatGPT accounts via a Discourse forum. They made a harmless pull request to OpenAI’s GitHub repository. They could theoretically access a huge scope of OpenAI’s systems. They reported the hack to OpenAI under its bug bounty programme. OpenAI addressed the exploited vulnerabilities. The researchers used OpenAI’s GPT-5.6 Sol model for most of the hack. AI tools made the hack far easier and faster. OpenAI paid Hacktron $6,500 for the findings.
What changed
AI-assisted hacking required months of effort and a well-resourced team.
What it unlocks
Accessing OpenAI’s software cache via compromised employee accounts.
- $6,500 bug bounty payment
Sources