Solana has changed the rules of its bug bounty program: you now have to permanently burn 1 SOL before submitting each vulnerability report. The reason: a month-long bug bounty campaign received 809 reports, and the team believes that almost all of them were generated or written with help from AI.
The security team was flooded with AI-generated junk reports, leaving reviewers to shoulder the cost in time and effort. Permanently burning that 1 SOL makes submitters pay a real cost upfront, so they can’t just generate reports with one click and send them in. For people seriously looking for vulnerabilities, it’s a barrier to entry; for those mass-producing reports, it’s a real expense.
Of the 809 reports, the materials only say that “almost all” were connected to AI, without giving a specific percentage.
$SOL
The security team was flooded with AI-generated junk reports, leaving reviewers to shoulder the cost in time and effort. Permanently burning that 1 SOL makes submitters pay a real cost upfront, so they can’t just generate reports with one click and send them in. For people seriously looking for vulnerabilities, it’s a barrier to entry; for those mass-producing reports, it’s a real expense.
Of the 809 reports, the materials only say that “almost all” were connected to AI, without giving a specific percentage.
$SOL
