Solana bug reports now cost 1 SOL as AI floods security teams with spam

Firedancer, Jump Crypto's independent validator client for Solana, has run public security contests to stress-test its code before wider rollout, echoing bug-bounty practice elsewhere in crypto such as Ethereum Foundation-run programs. The monthlong contest closed with 809 reports from 162 researchers, a volume Jump Crypto links largely to AI tools churning out submissions rather than genuine findings, overwhelming the triage team the program depends on.

Researchers must now burn 1 SOL, about $100, before a report is even read, and the token is gone whether the bug is real or not. Well-resourced firms and repeat bounty hunters can absorb that cost across many submissions; students, hobbyists and first-time reporters face a real barrier to entry. Firedancer's triage team gains a filter against AI-generated noise, but genuine low-stakes bugs may now go unreported.

Charging to report a vulnerability inverts the logic of bug bounties, which exist to reward researchers for finding flaws, not to tax them for trying. Crypto Briefing's assessment that the fee could deter low-quality submissions while excluding less-funded researchers points to a real trade-off between spam control and security coverage. If AI-generated noise becomes the default state of bounty programs industry-wide, paid gatekeeping could become standard practice rather than the exception, raising costs for defenders everywhere.

Whether the 1 SOL burn survives contact with Firedancer's next public contest will show if it filters volume without chasing away serious researchers. Jump Crypto's own read of the 809 submissions, that AI assistance touched nearly all of them, sets the benchmark other validator teams and bounty platforms will watch before deciding whether to copy the fee model themselves.