Hacker News Reader

$3500 when you consider they returned $3000 of that back to OpenAI in the form of burnt tokens.

If you read the article, you will see this was within the acceptable scope listed on OAI's bug bounty program.

It depends who you're hacking, where they're based, where you're based, and what you do. If you're extremely careful not to break any of the rules it can be completely legal, as it was in this case. Many jurisdictions make it completely illegal. I agree that $6,500 is a pittance.

And so they told the world ¯\_(ツ)_/¯

Well OpenAI is a small garage startup, it’s probably all they could manage.