## Curl stops the bug bounty program Daniel Stenberg, maintainer of the open-source project Curl, has announced the closure of the bug bounty program. The decision was motivated by the excessive number of bug reports automatically generated via artificial intelligence, which made the evaluation process unsustainable. Stenberg expressed hope that security researchers will continue to report vulnerabilities, even in the absence of financial rewards. He also added that he will continue to publicize examples of low-quality reports, defined as "silly ones." ## General context Bug bounty programs are widespread initiatives in the software world, offering financial rewards to those who report security vulnerabilities. The goal is to incentivize the discovery and correction of bugs before they can be exploited for cyberattacks. However, the advent of artificial intelligence tools capable of automatically generating reports has created new challenges for open-source project maintainers.