Our $1 million hacker challenge for React2Shell

T1Covered by 1 source · first reported by Vercel (blog + changelog) at 19 Dec 2025, 13:00 UTC

In the weeks following React2Shell's disclosure, our firewall blocked over 6 million exploit attempts targeting deployments running vulnerable versions of Next.js, with 2.3 million in a single 24-hour period at peak. This was possible thanks to Seawall, the deep request inspection layer of the…

security

Sources

• T1Our $1 million hacker challenge for React2ShellVercel (blog + changelog)19 Dec 2025, 13:00