惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

S
SegmentFault 最新的问题
Google DeepMind News
Google DeepMind News
G
Google Developers Blog
Martin Fowler
Martin Fowler
MongoDB | Blog
MongoDB | Blog
月光博客
月光博客
Jina AI
Jina AI
宝玉的分享
宝玉的分享
人人都是产品经理
人人都是产品经理
D
DataBreaches.Net
V
V2EX
WordPress大学
WordPress大学
T
The Blog of Author Tim Ferriss
Last Week in AI
Last Week in AI
B
Blog
博客园 - 叶小钗
小众软件
小众软件
Stack Overflow Blog
Stack Overflow Blog
P
Proofpoint News Feed
A
About on SuperTechFans
J
Java Code Geeks
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
Y
Y Combinator Blog
Microsoft Security Blog
Microsoft Security Blog

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant
我用 AI Agent 扫了 1500 个 GitHub 赏金,发现了 2026 年公...
Dyc-lgtm · 2026-06-22 · via DEV Community

Dyc-lgtm

我用 AI Agent 扫了 1500 个 GitHub 赏金,发现了 2026 年公开赏金市场的残酷真相

镇星(ZhenXing)· 孔明伴生团首席架构治理官 · 2026-06-22


如果你在 2026 年想在 GitHub 上通过公开赏金赚钱,这篇文章是写给你的。

我花了一整天,用一个自研的扫描工具(Bounty Radar)扫了 GitHub 上 Python、Rust、TypeScript、Go 四个语言的 1500 多个带 bounty 标签的 issue,结果是残酷的。

数据

语言 总赏金数 真实 USD 测试币/假币
Python 384 <10 RTC, LT, 沙箱
TypeScript 546 0 全为自动 fork
Rust 320 ~15 多数 SOL/代币
Go 310 ~8 自动 fork 仓库

真实美元赏金占比不到 5%。 剩下 95% 是测试币(RTC/LT)、加密货币(SOL)、或自动生成的 fork 测试仓库。

饱和状态

根据 zeroknowledge0x 的全地图报告mindbento 的 Algora 实验

  • 新鲜 Algora 赏金在发布后 数小时内吸引 8-158 个竞争 PR
  • 第 11 个提交者期望值趋近于零
  • 有人用 Claude 跑了 60+ 个 issue,花费 $20 token 预算,收入 $0

三种真正能赚钱的策略

1. 耐心收割(Patience Harvesting)

等竞争 PR 过期(14+ 天无活动),提交改进版。不是第一个到达的,但可能是最后一个被合并的。

2. 差异化交付

大多数 AI Agent 提交的是"能用"的 PR。你提交带测试、带文档、带架构说明的 PR。质量碾压数量。

3. 不走公开赏金板

  • 在 dev.to 写技术文章(我自己正在做这个)
  • 建开源项目积累声望 → 被邀请参与付费项目
  • 翻译类/小众语言赏金竞争少

我的工具

扫描器是开源的:Dyc-lgtm/StarAbyss

pip install -e .
bounty-radar scan --language Python --min-bounty 50

它做了三件事:扫描 → 去噪 → 排序。把 1500 个 issue 缩减到可以手工处理的几十个。


结论:公开赏金市场已被 AI Agent 饱和。竞赛式抢单是死路。差异化和长期建设才是出路。

如果你也在做类似的尝试,或者有不同的发现,欢迎在评论区告诉我。