Meta has paid roughly $1.2 million in bug bounties for its Muse personal AI agent, the company said in a blog post shared by David Singleton and reported by SecurityWeek on November 4. The programme ran privately from April and went public at Muse's September 8 launch; of more than 630 reports received, 64 were valid. Meta pays up to $300,000 per valid report — several times the top rewards it says other leading AI developers advertise — with prompt-injection attacks on a single user worth up to $130,000 and a fleetwide compromise up to $250,000.

The largest award, the full $300,000, was paid four months before launch, while Muse was still in early internal testing: a researcher demonstrated access to conversations and authentication tokens on the pre-release virtual machines Meta staff used to test the product. An authentication check had treated a header added by a local HTTPS proxy as proof a request came from a trusted source, and a system migration added a second proxy layer that let outside requests carry the trusted header too. Meta took the service offline, fixed the bug and stopped treating the local machine as trusted.

Two further $90,000 awards cover the agent-specific risks: a malicious web page that, when Muse was asked to summarise it, mimicked status messages from the agent's browsing tool and got it to execute actions that should have been caught — Meta says its classifiers now catch the attack and 100 variants — and a formatting trick that slipped one-time passcodes past Muse's email redaction filters. A $50,000 award covered an Android flaw that let a malicious app load an attacker's page into a privileged web view, and $1,000 a Mac flaw that could hijack auto-update. For an agent that acts across a user's email, calendar and messaging accounts, the bounty table is a map of what can go wrong.