I built a vulnerable app and spent $1,500 seeing if LLMs could hack it

A security researcher built a deliberately vulnerable Firebase-based app and spent $1,500 testing whether LLMs could exploit it; GPT-5.5 succeeded 70% of the time, while most others failed due to guardrails or misdirected focus.