Researchers report OpenAI flaws that exposed hidden reasoning and let shared links hijack accounts
Xint extracted raw reasoning from gpt-5.6-sol through a compaction endpoint (a $6,000 bounty); Parameter chained a chat-preview flaw into script execution in a viewer's session (a $5,000 bounty).
OpenAISecurity & misuse