Meta paid about $1.2 million in Muse bug bounties
Meta's private bug bounty for Muse, running from April until the agent's September launch, drew over 630 reports, confirmed 64 vulnerabilities, and paid about $1.2 million. The largest award, $300,000, covered a pre-release flaw that exposed conversations and authentication tokens, fixed before launch, while a prompt-injection flaw earned $90,000.