โ˜… NO REAL MONEY โ˜… Will a leaked system prompt lead to a public apology from a major AI l โ€” NO 70.0% โ—† INTEL: Mastercard Finalizes Acquisition of Recorded Future โ—† Will a CVSS 9.0+ RCE be disclosed in a major AI coding agent before 20 โ€” YES 80.5% โ—† INTEL: samoscout - LLM-powered passive and active subdomain enumeration tool โ—† Will a jailbreak prompt sell as an NFT for more than 1 ETH before 2027 โ€” NO 95.0% โ—† INTEL: Notes: AI Copilot Code Quality ยท Technical Ramblings โ—† Will itspricedin.lol itself get pwned within 90 days of launch? โ€” YES 99.1% โ—† Will an AI browser agent be shown exfiltrating user data via prompt in โ€” YES 70.0% โ—† Will a prompt injection attack be publicly blamed for a data breach at โ€” YES 62.0% โ—† Will AI-generated bug reports cause a major open-source project to shu โ€” YES 55.0% โ—† Will a global Cloudflare, AWS, or Azure outage lasting over 3 hours be โ€” YES 55.0% โ—† INTEL: XSSTRON - Electron browser to find XSS vulnerabilities automatically โ—† INTEL: OpenRouter Stealth Program EULA - terms for anonymous models and data training โ—† Which AI lab discloses the next headline security incident? โ€” OpenAI 46.2% โ—† INTEL: LlamaFirewall - LlamaFirewall โ—† INTEL: Docker-OSX - run macOS in Docker for security research โ—† Will a major password manager disclose a CVSS 9.0+ vulnerability befor โ€” NO 60.0% โ—† Will $POC ever be worth anything? โ€” NO 99.9% โ—† Will an executive literally say 'it's priced in' about a breach on an โ€” NO 85.0% โ—† INTEL: Kim Maida - The Agent Security Stack: Transport, Identity, Policy, Runtime โ—† โ˜… $POC HAS NO VALUE โ˜… โ—†
๐Ÿ“„ README.TXT - Notepad
IT'S PRICED IN (itspricedin.lol)
================================
The vulnerability prediction market.

    ai-security + prediction market == itspricedin.lol

WHAT
----
A play-money prediction market about vulnerabilities, breaches,
AI security incidents, and the general state of the computer.
You buy shares in outcomes. Prices are probabilities. When a
market resolves, winning shares pay 1 $POC each.

MONEY (THERE ISN'T ANY)
-----------------------
$POC = Proof-of-Concept coin. "The only cryptocurrency backed
by a working exploit." It is not a cryptocurrency. It is a REAL
column in a SQLite table. It has no value, cannot be purchased,
sold, transferred, withdrawn, or redeemed for anything, anywhere,
ever. Nobody will ever ask you for money on this site. If anyone
does, it's a phish; you should have bought YES.

* New accounts: 1,000 $POC
* Dial-up airdrop: +100 $POC every 24h (portfolio page)
* Listing a market: 50 $POC, burned

HOW PRICES WORK
---------------
Logarithmic Market Scoring Rule (Hanson, 2003). Each market has a
liquidity parameter b. Cost function C(q) = b * ln(sum_i e^(q_i/b)).
Buying moves the price; the house's worst case is b * ln(n).
The house is a row in the users table with balance 0.

RESOLUTION
----------
Only the house (admin) resolves. Rules are on each market. If the
rules are ambiguous the market may be VOIDED, refunding everyone.
Complain in the comments; that is what they are for.

SECURITY
--------
Passwords are bcrypt'd. Sessions are HttpOnly cookies. Trades are
serialized transactions. Reports welcome (see the "Will this site
get pwned" market). No DoS. There is no bounty. There is no money.

CREDITS
-------
Research feed: github.com/AnthonyHerman/ai-security-corpus
  (5660 resources, snapshot 2026-10-10; the site
  pulls new entries from the corpus by itself, hourly. The ๐Ÿ“š icon
  on the desktop opens the corpus in Internet Explorer. Sorry.)
Aesthetic: 98.css by Jordan Scales, then LSD.
Assistant: Vulny (bottom right). Vulny is not a lawyer.

THIS IS A JOKE. Nothing here is financial, legal, or security
advice. Especially not the security advice.
Past performance is not indicative of future CVEs.
๐Ÿ“Ž
๐Ÿ’ฐ get $POC --:--