Box Pays $1M Credits, $1K Cash

This is a strong validation of agent-driven security research—and a reminder that full VM platforms carry unusually valuable isolation boundaries.

• –Swarms let researchers parallelize reconnaissance, exploit testing, and verification across many attack paths
• –Five-hour remediation is an encouraging response time for a potentially serious cloud isolation issue
• –The $1 million credit award signals that compute credits may become a major bug-bounty currency for AI infrastructure
• –Full VMs give agents more capability than containers, but make hypervisor and tenant-boundary security critical
• –Box’s lack of public technical disclosure leaves developers without enough detail to assess residual risk