> HEIF upload → libheif overflow → code execution on the forum → over-permissioned SSO tokens → employee ChatGPT/Codex account → connected GitHub → pull request in openai/openai
Server side bounties aren't that profitable though:
> A two-month project, under $3,000 in model tokens .... OpenAI paid Hacktron a $6,500 bounty for the account-takeover flaw on its side.
The ideal hacker workflow would be to gain access to an account or system with model access which you can use for further hacks.