01
The MicroVM
Escape the Firecracker microVM and reach the host. The walls Malte Ubl pointed a frontier model at earlier this month, now with a purse attached.
ObjectiveGuest to host ProofLive PoC via the SDK
Room 01
The main attraction
For two weeks, Vercel is paying real money to anyone who can break out of its sandbox. The public HackerOne program runs August 18 through September 1, with up to $1,000,000 in the pool and bounties assigned per report by demonstrable impact. Firecracker microVM isolation, the host-side network boundary, and tenant separation are all in scope.
02
The Firewall
Defeat the host-side network boundary and reach a destination the egress rules forbid. The same firewall Vercel recently opened to Hobby plans.
ObjectiveForbidden egress ProofLive PoC via the SDK
03
The Neighbors
Read or modify another Vercel tenant's data. This is the door the $50,000 maximum per report is written on.
ObjectiveCross-tenant access Top payout$50,000
The payout ladder
| Severity | Per report |
|---|---|
| Critical | $25,000 to $50,000 |
| High | $10,000 to $25,000 |
| Medium | $5,000 to $10,000 |
| Low | $1,000 to $5,000 |
The dare has a history. A week earlier, Vercel CTO Malte Ubl wrote up what happened when he tasked Kimi K3 with breaking out of the same sandbox, and argued that offensive model capability should be pointed at defensive work before someone else points it elsewhere. This program turns the argument into a purse: findings become permanent fixes, and a public writeup of the techniques follows the close.
