Anthropic ran an AI bug bounty on open source for a month. It found 500+ zero-days.