Vercel bet $1,000,000 that nobody could break this wall. Someone went under it.
Your code shares a computer with strangers, and one wall keeps them out. Vercel offered up to $1M to anyone who could escape a Vercel Sandbox. 1,285 reports later, one got under the wall on day three: a Linux bug from 2008, unpatched for 18 years, found by a researcher and their AI for under $700 in tokens. Vercel's favorite bug was simpler: the host trusted what the sandbox told it. No customer data leaked, and Vercel paid $242,000 in bounties.
Source: "Findings from the $1M Vercel Sandbox challenge", Vercel blog, Oct 14, 2026 (Andy Riancho) https://vercel.com/blog/findings-from-the-1-million-dollar-vercel-sandbox-challenge The Linux bug: Paulos Yibelo (pwn.ai). The $700 figure is the researcher's own.
Your sandbox, your .env and the stranger next door are dramatizations; every other number on screen is from the sources.
Would you trust the wall?
Transcript
Your code shares a computer with strangers. One wall keeps them out. Vercel bet a million dollars on theirs. Then, they published what happened. 1,285 reports. One got past the wall on day three. Its packets leaked the host's memory. Two more could crash it or own it. Not through the wall, under it. A Linux bug from 2008. 18 years unpatched. A researcher and an AI found it in three days. Under $700. But that flaw isn't Vercel's. Almost every cloud stands on it. Probably yours. So, Linux got patched for everyone. But it wasn't Vercel's favorite bug. Their favorite was a classic. The sandbox said where its snapshot was saved. The host believed it. Swap two answers and one account opens another's entire file system. Rule one, never trust the client. So, did anyone's data leak? No. Not one customer's file. Vercel paid $242,000 to strangers for breaking in. Someone will find the next hole. Make sure they're on your side. Because…
