So they spent the $25. But the real question here is did they get the $500K?
Unquestionably they did not.
Their listed pricing was up to $50k.
https://cyber-peace.org/wp-content/uploads/2017/09/ZERODIUM-...
And that was before LLMs could produce these at volume.
The demand (dollars) does not go up commensurately with the supply. So today maybe $500 or a few thousand. Maybe not even that.
Probably not. The Wordpress Bug Bounty program pays very little. Exploit brokers will pay 500K, but we wouldn't be seeing it here if it was sold.
Unquestionably they did not.
Their listed pricing was up to $50k.
https://cyber-peace.org/wp-content/uploads/2017/09/ZERODIUM-...
And that was before LLMs could produce these at volume.
The demand (dollars) does not go up commensurately with the supply. So today maybe $500 or a few thousand. Maybe not even that.
Probably not. The Wordpress Bug Bounty program pays very little. Exploit brokers will pay 500K, but we wouldn't be seeing it here if it was sold.