Story · Vercel
$1 million hacker challenge for Vercel Sandbox (Vercel)
blog post · Story page
Vercel is putting $1 million behind attempts to break out of Vercel Sandbox, arguing isolation only holds if both the Firecracker microVM and the host-side network controls hold. Its CTO already pointed an unsafeguarded open-weight model at it: it mapped the guest kernel and wrote a fuzzer, and did not escape.
In plain words
- Vercel offered $1 million to people who can escape the security barriers around its isolated code-running service.
- It gives each program its own small virtual computer, separated from the main machine and every other program.
- Security also depends on blocking overlooked network routes that could let hostile code reach systems outside that computer.
- Vercel says an unrestricted artificial intelligence system mapped the isolated computer's core software and created automated attack tests without escaping.
- The challenge could expose weaknesses before attackers find them, helping teams run code they do not trust more safely.
Appeared in
- Aborted agent branches live on in the KV cache, plus StateM's harness scaling
Aug 19, 2026 · in the sections
Subscribe
Get the brief in your inbox
Pick daily, weekly, or both. Nothing is gated either way: every issue is on the site and in the feeds.
- Weekdays at 8:45am IST, one lead story and 6 to 9 items.
- Sundays, an argued synthesis rather than a recap.
- One click to leave, and quiet days say so in the subject line.