if you use a cluster of box's VMs (AI sandboxes 18x less expensive than vercel sandboxes)
to pentest them super hard
and succeed to break them this way
I'll add $1,000,000 in box credits to the prize
(~3100 years of 4vCPU 8gb runtime on box vs 176 on Vercel)
Agents can now exploit vulnerable sandbox boundaries, so we are testing ours in the open.
$1,000,000 hacker challenge for Vercel Sandbox:
• Escape the Firecracker microVM
• Defeat the host-side network boundary
• Up to $50k/report via @Hacker0x01
vercel.com/blog/one-million-…
Aug 18, 2026 · 8:07 PM UTC
someone asked what if you find a critical vulnerability in box sandbox*
(critical means you can penetrate another user's box without requiring to communicate with them and convince them to do certain suspicious actions)
I'll do this:
- 1st: same prize + 1k cash
- 2nd: just 2y not 10 + 1k cash
- 3rd: just 1y + 1k cash
- 4th & more: only 1k cash
