{"title":"OpenAI’s roughly 45× Linux bounty scenario uses a modified kernelCTF target","description":"The supplied evidence reproduces OpenAI’s hypothetical reward arithmetic, but does not establish rule-matched bounty revenue or fully loaded financial returns. The desktop and adapted-kernelCTF campaigns require separate accounting.","dataset_id":"spd:openai-s-linux-exploit-economics-what-do-the-bounty-comparisons-actually-measure-f5e91807","canonical_url":"https://superpowerdaily.com/research/openai-s-linux-exploit-economics-what-do-the-bounty-comparisons-actually-measure-f5e91807","version_url":"https://superpowerdaily.com/research/openai-s-linux-exploit-economics-what-do-the-bounty-comparisons-actually-measure-f5e91807/versions/v1","version":"v1","snapshot_hash":"5c70a4ad958e916a2b44f611929f23aa6d13d2589d0d36f49601cbb9ac66e68e","date_created":"2026-11-05T03:40:19.318Z","date_modified":"2026-11-05T03:40:19.318Z","license":{"name":"Superpower Daily data reuse terms","url":"https://superpowerdaily.com/terms"},"license_url":"https://superpowerdaily.com/terms","coverage_note":"The sample covers two reported campaigns and three cited reward programs, not exploit economics generally. Preserve the editorial cutoff of November 5, 2026, 03:31:42.046 UTC. Supplied page snapshots were retrieved at 03:32:44.176 UTC; they are checked versions, not independently archived versions at the exact cutoff. Recovering this saved evidence is not a new collection or experiment.","measurement_technique":["Use the five supplied primary documents: OpenAI’s disclosure, Google’s kernelCTF rules, Pwn2Own Berlin 2026 rules, and TyphoonPWN’s reward schedule and FAQ. Treat secondary coverage and social posts as attention signals, not independent validation.","Keep the desktop campaign and adapted-kernelCTF campaign separate. Distinguish total campaign API credits, reproduced vulnerabilities, exploit outputs, patch-deduplicated LPEs, hypothetical rewards and accepted payments.","Plan an evidence_matrix with columns for campaign, cost denominator, hypothetical reward calculation, required target, eligibility and timing restrictions, comparison status, and supporting source. Distinguish reproducible arithmetic from conditional rewards and publicly indeterminate payouts.","Desktop cost row: OpenAI reports $1,213,430 in campaign API credits, 1,724 reproduced vulnerabilities and 948 unique LPEs. Total credits divided by unique LPEs gives $1,279.99, rather than the reported $1,279. The approximately $359 successful-exploit development average uses a different denominator and cost scope; 1,169 exploit outputs became 948 patch-deduplicated LPEs, and unsuccessful attempts also consumed credits.","Desktop/Pwn2Own row: 948 × $20,000 divided by $1,213,430 reproduces the approximately 16× scenario. The reward concerns fully patched RHEL Workstations 10.1, with one registration per target and first-winner closure under standard rules. The May 14–16 competition preceded the campaign. Status: historical-price arithmetic, not established eligibility or revenue.","Desktop/TyphoonPWN row: 948 × $70,000 divided by $1,213,430 reproduces the approximately 55× scenario. The advertised amount is a ceiling; specified fully patched distributions and novelty conditions apply. Successive awards receive 100%, 50% and 25%, after which the category closes unless extended. The May 28 competition preceded the campaign. Status: ceiling-price arithmetic, not rule-matched revenue.","Adapted-kernelCTF row: $1,498,077 divided by approximately $32,936 reproduces 45.48×. OpenAI used latest Linux without SLAB_VIRTUAL; official rules require SLAB_VIRTUAL on Linux 7.2-rc5. Additional conditions include an LTS 6.12 trigger, reliability testing, novelty, competitive slots and publication. Status: arithmetic reproduced; target equivalence fails and finding-level payment eligibility remains indeterminate.","Do not add reward scenarios together automatically: novelty and prior-disclosure restrictions can make them alternative routes rather than additive proceeds. No exploits were executed or independently validated."],"methodology":["Use the five supplied primary documents: OpenAI’s disclosure, Google’s kernelCTF rules, Pwn2Own Berlin 2026 rules, and TyphoonPWN’s reward schedule and FAQ. Treat secondary coverage and social posts as attention signals, not independent validation.","Keep the desktop campaign and adapted-kernelCTF campaign separate. Distinguish total campaign API credits, reproduced vulnerabilities, exploit outputs, patch-deduplicated LPEs, hypothetical rewards and accepted payments.","Plan an evidence_matrix with columns for campaign, cost denominator, hypothetical reward calculation, required target, eligibility and timing restrictions, comparison status, and supporting source. Distinguish reproducible arithmetic from conditional rewards and publicly indeterminate payouts.","Desktop cost row: OpenAI reports $1,213,430 in campaign API credits, 1,724 reproduced vulnerabilities and 948 unique LPEs. Total credits divided by unique LPEs gives $1,279.99, rather than the reported $1,279. The approximately $359 successful-exploit development average uses a different denominator and cost scope; 1,169 exploit outputs became 948 patch-deduplicated LPEs, and unsuccessful attempts also consumed credits.","Desktop/Pwn2Own row: 948 × $20,000 divided by $1,213,430 reproduces the approximately 16× scenario. The reward concerns fully patched RHEL Workstations 10.1, with one registration per target and first-winner closure under standard rules. The May 14–16 competition preceded the campaign. Status: historical-price arithmetic, not established eligibility or revenue.","Desktop/TyphoonPWN row: 948 × $70,000 divided by $1,213,430 reproduces the approximately 55× scenario. The advertised amount is a ceiling; specified fully patched distributions and novelty conditions apply. Successive awards receive 100%, 50% and 25%, after which the category closes unless extended. The May 28 competition preceded the campaign. Status: ceiling-price arithmetic, not rule-matched revenue.","Adapted-kernelCTF row: $1,498,077 divided by approximately $32,936 reproduces 45.48×. OpenAI used latest Linux without SLAB_VIRTUAL; official rules require SLAB_VIRTUAL on Linux 7.2-rc5. Additional conditions include an LTS 6.12 trigger, reliability testing, novelty, competitive slots and publication. Status: arithmetic reproduced; target equivalence fails and finding-level payment eligibility remains indeterminate.","Do not add reward scenarios together automatically: novelty and prior-disclosure restrictions can make them alternative routes rather than additive proceeds. No exploits were executed or independently validated."],"metrics":[{"label":"Verified observations","value":"6","detail":"4 measured fields"},{"label":"Supported claims","value":"9","detail":"9 material findings"},{"label":"Cited sources","value":"5","detail":"5 primary or authoritative"},{"label":"Research score","value":"79","detail":"Automated topic and evidence score"}],"columns":[{"key":"entity","label":"Entity"},{"key":"metric","label":"Metric"},{"key":"value","label":"Value"},{"key":"unit","label":"Unit"},{"key":"observed","label":"Observed"},{"key":"source","label":"Source"},{"key":"transform","label":"Transform"}],"data":[{"unit":"USD API credits/LPE","value":1568.380952,"entity":"Adapted-kernelCTF campaign","metric":"Campaign API credits per LPE","source":"https://openai.com/index/a-thousand-fewer-paths-to-root","observed":null,"transform":"32936 / 21; rounded to six decimals; expenditure input is approximate."},{"unit":"USD API credits/vulnerability","value":703.845708,"entity":"Desktop campaign","metric":"Campaign API credits per reproduced vulnerability","source":"https://openai.com/index/a-thousand-fewer-paths-to-root","observed":null,"transform":"1213430 / 1724; rounded to six decimals. Allocates total campaign credits, not validation-stage credits alone."},{"unit":"USD API credits/LPE","value":1279.989451,"entity":"Desktop campaign","metric":"Campaign API credits per unique LPE","source":"https://openai.com/index/a-thousand-fewer-paths-to-root","observed":null,"transform":"1213430 / 948; rounded to six decimals."},{"unit":"multiple","value":45.484485,"entity":"Adapted-kernelCTF campaign","metric":"Hypothetical reward-to-API-cost multiple","source":"https://google.github.io/security-research/kernelctf/rules.html","observed":null,"transform":"21 * 71337 / 32936; rounded to six decimals. Campaign inputs from OpenAI disclosure; assumes every result separately qualifies and wins a payable slot."},{"unit":"multiple","value":15.625129,"entity":"Desktop campaign / Pwn2Own","metric":"Hypothetical reward-to-API-cost multiple","source":"https://openai.com/index/a-thousand-fewer-paths-to-root","observed":null,"transform":"948 * 20000 / 1213430; rounded to six decimals. Historical-price scenario, not rule-matched revenue."},{"unit":"multiple","value":54.687951,"entity":"Desktop campaign / TyphoonPWN","metric":"Hypothetical reward-to-API-cost multiple","source":"https://openai.com/index/a-thousand-fewer-paths-to-root","observed":null,"transform":"948 * 70000 / 1213430; rounded to six decimals. Ceiling-price scenario, not rule-matched revenue."}],"sources":[{"url":"https://openai.com/index/a-thousand-fewer-paths-to-root","name":"OpenAI","title":"A thousand fewer paths to root","records":5},{"url":"https://google.github.io/security-research/kernelctf/rules.html","name":"Google","title":"google.github.io","records":1},{"url":"https://typhooncon.com/typhoonpwn-2026","name":"TyphoonCon","title":"typhooncon.com","records":0},{"url":"https://typhooncon.com/typhoonpwn-2026-faq","name":"TyphoonCon / SSD","title":"typhooncon.com","records":0},{"url":"https://www.zerodayinitiative.com/Pwn2OwnBerlin2026Rules.html","name":"Trend Micro Zero Day Initiative","title":"www.zerodayinitiative.com","records":0}],"provenance":{"publisher":"Superpower Daily","source_count":5,"source_urls":["https://openai.com/index/a-thousand-fewer-paths-to-root","https://google.github.io/security-research/kernelctf/rules.html","https://typhooncon.com/typhoonpwn-2026","https://typhooncon.com/typhoonpwn-2026-faq","https://www.zerodayinitiative.com/Pwn2OwnBerlin2026Rules.html"],"methodology":["Use the five supplied primary documents: OpenAI’s disclosure, Google’s kernelCTF rules, Pwn2Own Berlin 2026 rules, and TyphoonPWN’s reward schedule and FAQ. Treat secondary coverage and social posts as attention signals, not independent validation.","Keep the desktop campaign and adapted-kernelCTF campaign separate. Distinguish total campaign API credits, reproduced vulnerabilities, exploit outputs, patch-deduplicated LPEs, hypothetical rewards and accepted payments.","Plan an evidence_matrix with columns for campaign, cost denominator, hypothetical reward calculation, required target, eligibility and timing restrictions, comparison status, and supporting source. Distinguish reproducible arithmetic from conditional rewards and publicly indeterminate payouts.","Desktop cost row: OpenAI reports $1,213,430 in campaign API credits, 1,724 reproduced vulnerabilities and 948 unique LPEs. Total credits divided by unique LPEs gives $1,279.99, rather than the reported $1,279. The approximately $359 successful-exploit development average uses a different denominator and cost scope; 1,169 exploit outputs became 948 patch-deduplicated LPEs, and unsuccessful attempts also consumed credits.","Desktop/Pwn2Own row: 948 × $20,000 divided by $1,213,430 reproduces the approximately 16× scenario. The reward concerns fully patched RHEL Workstations 10.1, with one registration per target and first-winner closure under standard rules. The May 14–16 competition preceded the campaign. Status: historical-price arithmetic, not established eligibility or revenue.","Desktop/TyphoonPWN row: 948 × $70,000 divided by $1,213,430 reproduces the approximately 55× scenario. The advertised amount is a ceiling; specified fully patched distributions and novelty conditions apply. Successive awards receive 100%, 50% and 25%, after which the category closes unless extended. The May 28 competition preceded the campaign. Status: ceiling-price arithmetic, not rule-matched revenue.","Adapted-kernelCTF row: $1,498,077 divided by approximately $32,936 reproduces 45.48×. OpenAI used latest Linux without SLAB_VIRTUAL; official rules require SLAB_VIRTUAL on Linux 7.2-rc5. Additional conditions include an LTS 6.12 trigger, reliability testing, novelty, competitive slots and publication. Status: arithmetic reproduced; target equivalence fails and finding-level payment eligibility remains indeterminate.","Do not add reward scenarios together automatically: novelty and prior-disclosure restrictions can make them alternative routes rather than additive proceeds. No exploits were executed or independently validated."],"snapshot_hash":"5c70a4ad958e916a2b44f611929f23aa6d13d2589d0d36f49601cbb9ac66e68e"},"distributions":{"csv":"https://superpowerdaily.com/api/research/openai-s-linux-exploit-economics-what-do-the-bounty-comparisons-actually-measure-f5e91807/versions/v1?format=csv","json":"https://superpowerdaily.com/api/research/openai-s-linux-exploit-economics-what-do-the-bounty-comparisons-actually-measure-f5e91807/versions/v1?format=json"}}