huntr Blind Trust AI hacking challenge 2026
huntr pays $15,000 in prizes to people who trick AI assistants into leaking secrets in its Blind Trust challenge. It ends October 30, 2026.
Blind Trust is a paid hacking challenge on huntr, a bug bounty platform for AI and machine learning backed by Palo Alto Networks. Players attack three AI assistants that are each built to protect a secret. The goal is to get each secret out.
The total prize pool is $15,000, split over two leaderboards. The Fewest Tokens board pays $4,800 to its top five, from $600 down to $100. The Moving Target board pays $10,200 to ranks 1 to 30, from $1,600 down to $70. Prizes go to whoever holds a winning rank when the challenge closes.
The three targets are a legal research assistant that holds a leaked credential, an HR benefits assistant that reads uploaded text files and can send email, and a third assistant that keeps its secret only in memory. The test systems are sandboxes, not real company services.
The main rule is that every attack must be your own and typed by hand. Bots, scripts, scanners and fuzzers lead to a ban and the loss of your standings.
You must be over 18 to take part, and residents of Italy are not eligible. Payouts go through Stripe Connect, which asks winners to verify their identity.
huntr announced the challenge as live on September 15, 2026. It ends on October 30, 2026 at 3:00 pm UTC.