OpenAI raises its bug bounty: up to $172,000 for the worst ChatGPT flaws
On 2 November 2026, OpenAI raised Security Bug Bounty rewards. Critical bugs in ChatGPT, Codex or the API Platform now pay up to $30,000, and exceptional findings up to $172,000 with new bonuses.
On 2 November 2026, OpenAI announced higher rewards in its Security Bug Bounty program. The company says it is "more than quadrupling the midpoint of our reward ranges for medium, high, and critical findings on average."
The new ceilings
A critical vulnerability in a core product, ChatGPT, Codex or the API Platform, now earns up to $30,000. Exceptional critical findings on those targets remain eligible for up to $100,000, "and now up to $172,000 with bonuses" (OpenAI).
Three bonus multipliers
OpenAI adds three multipliers on top of the base bounty (OpenAI):
- Quality: a reliable proof of concept that isolates the bug, shows when it can be exploited and demonstrates its impact.
- Loyalty: a five-tier program for researchers who report consistently.
- Priority campaigns: short-term bonus pools for newly launched features.
What the examples show
OpenAI published illustrative calculations. A one-click ChatGPT account takeover, previously awarded $6,500, would now pay $51,577 ($30,000 × 1.15 quality × 1.30 priority campaign × 1.15 top loyalty tier). A significant security-boundary compromise, such as reading arbitrary users' ChatGPT messages, comes to $171,925 ($100,000 with the same multipliers). A medium ChatGPT bug that once paid $750 would now pay $2,415 (OpenAI).
Reports not yet awarded get the new ranges. For bounties paid in the 30 days before the announcement, OpenAI will pay the difference if the finding would have earned more (base and loyalty awards). Its security team will also be at PROMPT2PWN in Oakland on 20 and 21 November (OpenAI).
Why it matters
ChatGPT and Codex now hold chat histories, files, code and connected accounts for a very large user base. The top example OpenAI chose, reading other users' chats, is the risk most users care about. Paying more for those reports gives researchers a stronger reason to disclose privately rather than sell or publish. For teams building on the API, it is also a sign of where OpenAI sees its most sensitive attack surface.
