The curl project is stopping its bug bounty program at the end of January 2026, as indicated by a pull request to remove related documentation and mentions. This decision appears to be a response to an increase in low-effort, potentially AI-generated bug reports that strain maintainer time.
Edward Kiledjian
@ekiledjian