---
id: 10353
title: "Our $1 million hacker challenge for React2Shell"
source_domain: vercel.com
source_url: "https://vercel.com/blog/our-million-dollar-hacker-challenge-for-react2shell"
published_at: "2025-12-19T00:00:00Z"
tags: ["bug-bounty", "rce", "cloud-security", "web-security", "firewall", "vercel"]
phying_url: "https://phying.com/item/10353"
lang: en
---

# Our $1 million hacker challenge for React2Shell

## Summary

We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.

## Intelligence Metadata

- **Sources:** vercel.com
- **Published:** 2025-12-19T00:00:00Z
- **Original:** https://vercel.com/blog/our-million-dollar-hacker-challenge-for-react2shell
- **Phying News:** https://phying.com/item/10353