THE article discusses the impact of the 'vulnpocalypse' on the bug bounty economy, highlighting how AI-generated vulnerability reports are driving down prices for many mid-tier vulnerabilities, which can range from $2,000 to $50,000. With increased submission volumes reported by platforms like HackerOne and Bugcrowd, independent researchers reliant on these payouts may face significant economic pressure.
Quality of submissions is also cited as a concern, with an influx of low-quality reports, referred to as 'AI slop', complicating the triage process. While total payouts may rise, the value per bug finding is decreasing, transforming bug hunting into a numbers game. Despite these challenges, experts believe the bug bounty ecosystem will endure in a changed form, offering opportunities for adaptation and growth among researchers.