Three Indian security researchers—Harsh Jaiswal, Mohan Pedhapati, and Rahul Maini—were behind Hacktron AI’s disclosure that it chained together two vulnerabilities to compromise OpenAI employees’ ChatGPT and Codex accounts, gain access to OpenAI’s internal code repositories, and open a pull request inside the company’s private monorepo. Jaiswal, known as rootxharsh, signed up on HackerOne in January 2016 and worked as a security engineer at Zomato and Vimeo; in January 2021, he and Maini found a misconfiguration in a content management system on Apple’s servers that let them access authenticated files without logging in, plant a webshell, and execute code, earning $50,000. He later co-founded Hacktron AI and serves as Chief Research Officer. Pedhapati, who uses the handle s1r1us, is a Computer Science graduate of RGUKT Nuzvid, represented zer0pts with a top-three APAC finish in BountyCon’s CTF and a Google CTF finals qualification, landed in hall-of-fame lists for Microsoft, Valve, Elastic, and Discord, ranked in the top 100 of Google’s Vulnerability Reward Program, worked as a senior security researcher at Cure53, and founded a security auditing company that reportedly grew to around €1.5 million in revenue.