In August, we launched the $1M hacker challenge for Vercel Sandbox , inviting security researchers to try and escape Vercel Sandbox. We also coordinated with cybersecurity experts Trail of Bits to review the source code and security architecture.

Here is a summary of the challenge:

1,285 reports over two weeks

$242,000 in bounties paid out

One Linux kernel zeroday vulnerability uncovered

No reports showed anyone accessing customer data in Vercel Sandbox. The most severe finding was the defect in the upstream Linux kernel.

Copy link to heading The kernel zero day

The program's most important report arrived on day three.

Paulos Yibelo (pwn.ai), a HackerOne researcher working from a standard sandbox with no special access, found a defect in the Linux kernel's networking stack.…