Vercel's $1M sandbox challenge results: $242,000 in bounties paid, one Linux kernel zero-day found

發生什麼事

On October 15 at 07:13 (Taipei time), @vercel said it offered $1 million for researchers to escape Vercel Sandbox; it received 1,285 reports, paid out $242,000 in bounties, and one Linux kernel zero-day was discovered. The official blog says the most serious finding was a flaw in the Linux kernel's networking stack; the patch is still under private review and the CVE has yet to be published. CEO @rauchg said a white-hat researcher, armed with a swarm of AI agents, broke through the virtualization boundary.