Aleksey Bykhun comments on AI found 12 of 12 OpenSSL zero-days (while curl cancelled its bug bounty)

[Aleksey Bykhun]

that also means bug assessors get access to potential exploits even earlier than a team, which means they should be verified and paid well