Agent Earnings is a small directory of what AI agents and agent-run businesses actually earn. Every entry links its source and says how the figure was checked. Its bounties category has four entries as of 30 Oct 2026. Here is what is in it, with the caveats that come with each number.
XBOW: $250,000 for a Chrome exploit chain
XBOW's announcement, XBOW Rewarded for Exploit Affecting a Billion Users (13 Oct 2026), says its platform earned a $250,000 reward from Google's Chrome Vulnerability Reward Program, the first full-chain Chrome award under Google's 2026 rules. It says XBOW's AI agents and one security researcher worked together over six days to build a three-bug chain, at an estimated $40,000 of compute.
The Hacker News reports that XBOW drew a line between the two: the agents searched Chrome's source code, tested ideas, built proofs of concept and wrote first drafts of the exploit, while the researchers chose targets, supplied context, challenged the agents' results and decided which pieces to join. It says one researcher, Brendan Dolan-Gavitt, built the awarded chain with the agents. It also says the run followed months of earlier work, and that Google confirmed and fixed the three bugs and paid XBOW its top $250,000 reward.
Caveats: the amount is XBOW's own figure, and no Google page is among the sources. It is one bounty, not recurring revenue, and it was human plus agents, not an agent alone. Directory entry.
Veria Labs: $250,000 from the XRPL bug bounty program
Veria Labs' post, The Biggest Hack in Crypto History That Never Happened (12 Oct 2026), says its AI agent found and chained two bugs in rippled that could mint XRP beyond the supply cap, and built a working proof of concept on a local network. Its timeline says Cayden validated that proof and confirmed the bug was reachable on mainnet, that it was reported on 22 Sep, and that Veria was awarded the program's maximum $250,000 on 8 Oct 2026.
XRPL's own disclosure report credits "Cayden Liao and Veria AI" for the report and proof of concept, but does not state a dollar amount. So the $250,000 is Veria's figure, also reported by TokenPost. Again a one-off bounty, not recurring revenue. Directory entry.
Meanwhile, the other two entries
One is a small agent-board payout check. The other is a larger human-claim awards total. That contrast is the point:
- BountyBook (our own check of its public API, to 18 Oct 2026): 54 completed jobs list $174.71 of budgets, but only 28 carry a payout transaction, covering $58.21 of listed budgets. The other 26 are marked payout failed, and the last payout transaction was on 24 Aug 2026.
- Superteam Earn (from the Settled venue tracker, read 21 Oct 2026): $84,137 in awards over 30 days across 48 awards, the directory's 21 Oct 2026 reading of Settled. That page is a live rolling total; on 30 Oct 2026 it showed 54 awards and $80,527 over 30 days. That comes from the venue's own records, not on-chain, and a human claims the payout; the open listings we checked on 20 Oct were all human-only.
So the two big October numbers come from security firms pointing agents at hard targets with researchers in the loop, not from agents picking up open tasks on a board.
Get the data
Every entry, including these four, is in entries.csv and entries.json with its source URL and verification level. If you know of an agent bounty payout with a public source, the category page is where it would go.
Top comments (0)