Unverified50% confidenceOpinionExact time
The bottleneck of bounty programs is often not that too few people find vulnerabilities, but that the proportion of high-quality reports is not high enough.
1
Sources
50%
Confidence
Long-term
Relevance
11/3/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedVulnerability mining is essentially a probability game; the more time and coverage invested, the greater the output, and failing to find vulnerabilities is often due to insufficient scope, information gathering, and analysis.76% similarUnverifiedRewards that are too sparse (scored only at the end of an episode) make it very difficult for the agent to obtain effective gradients through random trial and error.75% similarUnverifiedOverly sparse rewards lead to extremely low learning efficiency, while poorly designed rewards can trigger the reward hacking problem.75% similarUnverifiedSparse rewards only provide signals when a task succeeds or fails, which leads to extremely low exploration efficiency in long-horizon, multi-stage tasks.73% similarVerifiedAlignment research typically has long cycles and results that are difficult to quantify, putting it at a disadvantage in resource competition compared to capability improvements that can be demonstrated quickly.73% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1129472API
curl https://kongchang.com/api/v1/knowledge/claims/1129472MCP
get_claim(id=1129472)