We're discontinuing our bug bounty program

·2026.05.15 22:33

Key point

Turso has discontinued its bug bounty program due to a surge in low-quality AI-generated code (slop).

Details

Turso announced it is ending its bug bounty program, which paid $1,000 for reports of data corruption bugs.

The main cause is a surge in low-quality 'slop' PRs (Pull Requests) generated in bulk using LLMs and similar tools. As a flood of AI-generated PRs chasing rewards poured in, the maintenance team ended up spending most of their time filtering out meaningless requests instead of reviewing actual bugs.

This serves as an example of the negative impact generative AI is having on open source contribution practices and security governance, pointing to new development workflow challenges in the AI era.

software-engineering open-source generative-ai bug-bounty ai-slop turso

Read originalShare on Threads

This summary was generated automatically by AI. Check the original for the author's claims and context. Copyright belongs to the original author.

Our guide explains how the AI works. Report summary errors, attribution issues, or removal requests via Contact.