A Hacker Built Self-Updating Bug Bounty Skills From 2,000 Reports

The Claude Code Bug Bounty Run · Part 1 of 2 — How a live-hacking $40K run started with a single API export.

30-second version: A hacker known as Archangel made between $40,000 and $50,000 at a live hacking event using Claude Code almost entirely. The edge was not the tool out of the box. It was a skills and agent-file system he built by feeding Claude his 2,000-plus HackerOne reports, then letting it grow itself. If you have report history (or access to disclosed paid reports), you can build the same thing.

At a recent live hacking event, a bug bounty hunter made between $40,000 and $50,000.

He used Claude Code almost entirely. Not the off-the-shelf assistant, but a custom setup: a blanket agent file, a folder of skills, and a per-program memory that learns as he hunts.

The hunter is known online as Archangel ( Behrouz Sadeghipour in video calls him Douglas). In a screen-share interview he walked through exactly how the system is built. The interesting part is not “use AI to find bugs.” It is…