Hacker bounty fever: dopamine spikes and millions of dollars

“The whole experience is amazing, and that’s what keeps me going back and back and back again,” said hacker Fredrik, aka STÖK, about being a bug bounty hunter.

In the latest Cybernews documentary, bug bounty hunters like STÖK discuss how they keep coming back for more bounties. This got me thinking: is there arguably something borderline addictive about catching vulnerabilities?

Hackers need to work persistently when bug hunting to catch and uncover vulnerabilities. When they finally do it, the chemical reactions released in the brain might be comparable to the feeling that gamblers get when they win big.

This feeling is what hacker STÖK calls “bounty fever.” It’s not only that feeling of finally completing the puzzle, but it's also the hundreds of thousands, if not millions, of dollars at stake.

In our latest Cybernews documentary, we interviewed a handful of hackers who have collectively made $100 million while hacking.

The big cash payouts and the sense of accomplishment a hacker feels when they crack the code might contribute towards the need for more.

But it's difficult to say why and how these factors contribute to making hacking irresistible. So, I decided to consult some experts to figure out why and how hackers get hooked.

How hackers get into hacking

Hackers and experts alike agree that many hackers start out because they’re curious about breaking into systems.

“Curiosity always seeks its own agency and always bristles against control,” said Ian Campbell, senior security operations engineer at DomainTools.

Curiosity isn’t the only factor that gets people into hacking. Campbell posits that hackers are simply “wired differently” and seek the different types of challenges and rewards that hacking offers.

However, T.J Ramsey, senior director of threat operations at Fortified Health Security, said that all hackers may not have the luxury of getting into the subculture by simply being curious or attempting a fun challenge.

Instead, “hacking offers a means of survival. Much like how inner-city youth may be drawn to the quick profits of drug dealing and gangs, some individuals turn to hacking as a way to make a living due to limited opportunities or the allure of fast money.”

The financial rewards are often quick and big, making hacking all the more attractive. Ed Gaudet, CEO and founder of Cesinet, a risk management and cybersecurity company focused on finding solutions for healthcare, said that “financial gain is still the number one driver for hackers.”

Approximately $20 billion is lost worldwide due to ransomware attacks, meaning that blackhat hackers can get a large payout quickly and efficiently.

However, as shown in the Cybernews documentary, ethical hackers can also expect a big payout. Instead of exploiting vulnerabilities, they identify them and make companies aware of the bugs.

Although this may not be as lucrative as blackhat hacking, it could still earn you hundreds, if not thousands, of dollars.

That’s part of the reason why hackers get so hooked.

Why is hacking so desirable?

First, think of a craving. The parts of the brain that are activated when you crave something are related to the rewards system.

This activation releases dopamine, commonly known as the happy chemical, which creates a sense of anticipation or reward.

Hackers might get this craving or itch when they’re hunting bugs or breaking into a system, which might just be the anticipation of the financial reward. These feelings then might be associated with hacking for hackers, making the practice all the more alluring.

Many experts agree that modern hacking has the potential to be addictive as it's a clever challenge that pays well.

“Modern hacking has an appeal that comes from being an intellectually challenging thing that you can do, that you now get recognized in a community of hackers, and that actually pays you something,” said Gaudet.

Not only is it a pastime, but it has become a career for many. The bug bounty company HackerOne featured in the Cybernews documentary has paid out hundreds of millions in bug bounties, which goes to show just how seductive hacking can be.

There are plenty of things hackers can get addicted to, including financial rewards, notoriety within the hacking community, the rush of accomplishment when you finally crack the code, and much more.