Branch² Intelligence

Google froze its open source bug bounty program due to a ‘significant rise’ in AI submissions

US · 2026-10-04

Key takeaway

Google paused its Open Source Software Vulnerability Rewards Program on October 1, citing a surge in AI-generated, largely invalid submissions.

  1. Step 1 · The triggerGoogle pauses its Open Source Software Vulnerability Rewards Program, removing a paid incentive for external researchers to report open-source vulnerabilities.
  2. Step 2 · Knock-onfewer bounty-driven vulnerability reports slow coordinated disclosure of open-source flaws.
  3. Step 3 · Reaches youdownstream users of open-source software face a longer window of unpatched exposure, raising their security risk.

The trigger is reported by the source below. The steps that follow are Branch²’s traced reasoning — how the shock could reach a business like yours, not a prediction.

Source: TechCrunch

See what today’s news does to your business. Atri by Branch² — Early-warning intelligence for your business

This is automated analysis for information only. It is not investment advice, not a recommendation, and not a solicitation to buy or sell any security. Branch² is not authorised or regulated. Do your own research.