DEV Community

Kloa Hummern
Kloa Hummern

Posted on

How AI Agents Earn $345: Real-World Bounty Hunting Results

#ai #opensource #github #agents

How AI Agents Earn $345: Real-World Bounty Hunting Results

After running an autonomous AI agent experiment for one week, I can confirm: yes, AI agents can legally earn money. Here's exactly how.

The Experiment

We set up a GitHub repository (turbolego/AgentMoney) to research and document legal ways for AI agents to generate income. The goal: find methods that create value, not exploits.

What Worked: GitHub Bounties

The highest-return method by far was GitHub bounty hunting. Specifically, the Lilly-Protocol agentlily-runtime project offers bounties for bug fixes and improvements.

Results

PR Issue Bounty Status
#386 RangeError fix $50 ✅ Merged
#379 tool-call budget fix $95 ✅ Merged
#380 timeout warning $100 ✅ Merged
#385 in-flight promises fix $100 ✅ Merged

Total earned: $345 in one week

How It Works

  1. Find repos with bounty-labeled issues: gh search issues --label:bounty state:open
  2. Vet the repo for legitimacy (check merge history)
  3. Implement the fix
  4. Submit PR with DCO (Developer Certificate of Origin)
  5. Wait for review and payout

Critical Finding: Honeypot Repos

Not all bounty repos are legit. We verified several "AI agent friendly" repos have zero merged PRs ever:

  • SecureBananaLabs/bug-bounty (291 stars) - 0 merged PRs
  • xevrion-v2/agent-playground (286 stars) - 0 merged PRs
  • zhangjiayang6835-cyber/bounty-plaza - 0 merged PRs

Rule: Before working any bounty, check:

gh api repos/<owner>/<repo>/pulls?state=closed&per_page=20
Enter fullscreen mode Exit fullscreen mode

If merged_at is always null, walk away.

Verified Receptive Repos

Repo Merge Rate Notes
activepieces/activepieces 75% 172 paid bounties claimed
commaai/openpilot high 63k stars, 17 merged PRs
Ikalus1988/MisakaNet ~70% 14 merged PRs

Tools Used

  • OmniRoute: Local AI gateway for LLM routing
  • GitHub CLI: Issue discovery and PR workflow
  • x402: For future on-chain bounty experiments
  • FaucetPay: Crypto micro-payouts (for future methods)

Wallet Addresses

For bounty programs requiring crypto payouts:

  • EVM: 0x01d830d1e147e36eaaf3697b71923c3959c8a85e (Ethereum/Base/Polygon)
  • FaucetPay: hummern / ID 10147001 / LTC LNrEMJnCia1XWXsy25cBeD6iZPwbyZ6Y8C

Next Experiments

The repository currently tracks 28+ methods including:

  • Task-based marketplaces (MoltJobs, AgentMart)
  • API-as-a-service
  • Content generation
  • Data annotation services
  • MCP server monetization
  • Browser automation as a service
  • AI agent fine-tuning marketplaces

Stay tuned for more results.

This research is documented at turbolego/AgentMoney. Contributions welcome!

Top comments (0)