Three researchers reached OpenAI's code path in under 72 hours — and were paid $6,500

Hacktron says three researchers combined an image-upload bug with an SSO flaw to reach an OpenAI code path in under 72 hours and receive $6,500. The write-up is useful as a bounded security case because it covers timing, scope, and token cost, but the summary does not describe broader exploitability.