Google freezes open-source bug bounty program amid flood of invalid AI slop submissions — product flaw submissions halted until 2027 as maintainers drown in hallucinations
“Google engineers and open-source maintainers were reportedly being overwhelmed by thousands of these poorly written reports”
What happened
Google has stopped taking product flaw reports in its reward program for open-source software after a flood of AI-written submissions describing bugs that were invalid or did not exist. It says it will give an update by early 2027.