OpenAI Bio Bug Bounty: $50K for Universal GPT-5.6 Biosafety Jailbreak (July 2026)
OpenAI July 9, 2026 doubles Bio Bug Bounty to $50,000 for a universal jailbreak against GPT-5.6 and GPT-5.5 biosafety challenges. Private program, NDA, scope until July 27 for 5.5. vs Fable red-team jokes and payout skepticism.
The hunt: a universal jailbreak — one technique that defeats OpenAI's predefined biosafety challenge against harmful biology outputs (pathogen-style instructions), not a single lucky prompt on one session.
TL;DR — July 9, 2026 announcement
Field
Detail
Program
OpenAI Bio Bounty Program (evolved from GPT-5.5 Bio Bug Bounty)
Top prize
$50,000 (was $25,000) for universal jailbreak
In scope
GPT-5.6 from day one · GPT-5.5 through July 27, 2026
After Jul 27
GPT-5.6 only (unless OpenAI updates scope)
Partial wins
Smaller awards at OpenAI discretion
Access
Private · rolling application · NDA · ChatGPT account required
The program will remain focused on universal jailbreaks that can defeat our predefined biosafety challenge against OpenAI's frontier models, starting with GPT-5.6 and going forward.
Jokes — e.g. using Fable 5 to jailbreak GPT-5.6 (not part of the program; different vendor, different safeguards)
Skepticism — $50K is small if the vulnerability class is truly catastrophic; "universal" may let OpenAI reject valid partial finds (@lonelysloth_sec thread)
explainx.ai read: This is safety marketing + real testing in one package — parallel to GPT-5.6's government-gated preview and Washington's interest in frontier biology risk, not a consumer feature.
Timeline and scope
Date
Scope
Before July 9
GPT-5.5 Bio Bug Bounty at $25K
July 9, 2026
Program renamed · $50K · GPT-5.6 added
Through July 27, 2026
GPT-5.5 still testable under original scope
After July 27, 2026
GPT-5.6 primary in-scope model
OpenAI will communicate future scope changes to onboarded researchers.
Sol does not cross Cyber Critical per preview system card
Bio safeguards
Layered refusals + classifiers + $50K external red team
Policy
Same week as Fable export-control discourse — different mechanism (bounty vs ban)
Anthropic's parallel story: classifier-layer Fable for public access vs Mythos for vetted cyber/bio. OpenAI's parallel: pay researchers to break bio guards on GPT-5.6 while shipping it broadly.
What to watch
First paid universal claim — does OpenAI publish criteria for "universal"?
July 27 GPT-5.5 sunset — last day for dual-model testing
Kalshi/Polymarket — prediction markets on jailbreak timing (crowd sentiment, not OpenAI schedule)
Independent repro — whether findings transfer across API vs ChatGPT surfaces
GeneBench vs bounty — capability benchmarks rising while safeguards get stress-tested
Bounty amounts, scope dates, and program rules reflect OpenAI's July 9, 2026 announcement. Private program details may change — verify on openai.com before applying.