A bit cheap for a vulnerability this serious
1 November 2026 (Simon Willison’s Weblog). Simon Willison commented on OpenAI's $5,000 bug bounty payout for a serious ChatGPT account takeover exploit, published on his weblog in October 2026.
How We Took Over ChatGPT Accounts
More from Simon Willison · AI and security · 2026
Who else?
What it refers to: OpenAI paid out $5,000 for a ChatGPT exploit that let a shared link take over another signed-in user's account and data.
Other voices
- “A magnet for security risk” Willem Delbare,
- “Each new encoding trick is a new hole” Apollo Raines,
- “We must assume a model is compromised and contain it from the start” Satya Nadella, Builder,
- “The probably worst day in cybersecurity history so far” Zvi Mowshowitz, Writer,
- “Feels like March 1, 2020 for Cyber” Joshua Achiam,










