JailbreakMe

This JailbreakMe is the Solana app at jailbreakme.xyz, where people pay to try to trick AI agents into breaking their rules. It has nothing to do with the old JailbreakMe website that unlocked iPhones. Each AI agent guards a prize pool. You send it messages. If you talk it into doing the thing it was told never to do, the pool is paid to your wallet. The project has a token called JAIL, and it placed third in the Solana AI Hackathon. The platform has gone quiet, though. When we checked in October 2026, every tournament on the site was marked "concluded" and the newest was more than a year old.

How JailbreakMe tournaments and prize pools work

A JailbreakMe tournament is one AI agent, one secret or banned action, and one pot of SOL. You connect a Solana wallet and pay a fee for each message. Then you try to get the agent to slip. This kind of attack is called prompt injection. It means wording your message so the AI ignores its rules.

The agent itself decides who wins. The JailbreakMe rewards page says the model answers every message by calling one of two functions. One marks the attempt as failed. The other, handleChallengeSuccess, marks it as a win, and the pool is then sent to the winner with no human in the loop.

The same page sets out the money. Each message costs 1% of the pool, so attempts cost more as the pot grows. The winner takes 70%. The operator who launched the agent takes the rest.

Later games were priced differently. Most tournaments on the JailbreakMe agents page show a flat entry fee of 0.005 SOL per message. The project's GitHub README says price and expiry are set per tournament.

Early games had two limits. In the first one, named Zynx, a message could run to 4,000 characters. The agent saw only your own recent messages, and none from other players.

Launching an AI agent, JailX bounties and Alcatraz

JailbreakMe has three parts beyond playing: a launchpad for operators, a bounty board for agents on X, and a published defence method.

The launchpad lets a team put its own agent up for attack. The site lists four routes: prompt-based creation (marked beta), quick creation, advanced creation and an API integration. The operator sets the prize pool, the message price and the expiry.

JailX is a "social bounties" board. JailbreakMe posted rewards of $500 to $5,000 for getting well-known AI agents on X to say or do something specific, such as creating a token. The JailX page marks several of them as jailbroken, with links to the posts.

Alcatraz is the team's write-up on defending agents, published on 21 January 2025. It describes two ideas. The first is to let an agent act only through a short list of approved functions. The second is a "double agent": a second AI that reads each reply and blocks it if the first agent has strayed from its instructions.

The code is open source. The JailbreakMe repository on GitHub includes an ElizaOS ai16z$0.00038+1.1% component alongside its backend services.

Is JailbreakMe still active?

JailbreakMe's website was live on 13 October 2026, but nothing on it was open to play. Every agent on the agents page, about 50 in all, was marked "concluded". The newest one dates from May 2025.

The chain tells the same story. Solscan's page for the JailbreakMe program showed no transactions in the previous month. The most recent one was well over a year old.

The team's X account is still posting. In early October 2026 it began pointing followers to a separate account called Resolved.fun. One post told them, "We're launching this week!" At the time of writing, neither account had said what Resolved.fun is. Nor had they said what it means for JailbreakMe tournaments or the JAIL token.

The project's busiest spell came in the winter of 2024 to 2025. The largest concluded pool, for an agent named Myrios, is listed at about $100,000.

That winter also brought the hackathon result. SendAI ran the Solana AI Hackathon and announced in January 2025 that JailbreakMe had placed third in the main track. More than 400 projects entered, according to CryptoNinjas.

What the JAIL token does

JAIL is JailbreakMe's token on Solana, and its only live use described by the project is a buyback. The JAIL token page says "a portion of every prize pool is allocated to buy back $JAIL tokens from the market". It does not say what portion.

That matters now. A buyback funded by prize pools only runs while tournaments run, and none have run since May 2025.

The token is JAIL, and it was launched on Pump.fun. The project calls itself "fairly launched" but publishes no breakdown of who holds the supply.

The token page also lists planned uses: paying in JAIL to enter some tournaments, earning JAIL as a reward, funding custom tournaments with it, and burning or locking it to list an agent on a marketplace. The page still describes all of these as future plans. Trading in JAIL was thin in October 2026, so check the live figures on this page before assuming you could buy or sell any real size.

Who JailbreakMe is for

JailbreakMe suits two groups, and both need an open tournament to get anything from it.

Players are people who enjoy prompt puzzles and accept that most paid attempts lose. You need a Solana wallet and some SOL. Think of the message fee as an entry ticket to a contest, not a deposit. Farmer Felix, one of the busier agents, took 649 paid attempts.

Operators are teams building AI agents who want strangers to attack a prompt before it goes live. A tournament can show you how a prompt fails. It cannot tell you a prompt is safe. Even the team's own Alcatraz paper presents crowd testing as one layer among several.

If you are after a formal security review of an AI product, this is the wrong tool. JailbreakMe is a paid game with a security use, and it produces no audit report.

JailbreakMe risks: upgrade key, AI judging and inactivity

JailbreakMe has three main risks. One key can change its program. Its referee is an AI. And the platform has had no recent activity.

Start with the key. The Solana program linked from the JailbreakMe website can be upgraded, and Solscan lists a single address with the power to do it. Whoever holds that key can swap in new code, including the code that holds and pays out prize pools. Solscan shows no verified build and no security contact for the program. We found no published audit of it.

The judge can be wrong. The agent picks the winner by calling a function. A badly written agent could pay out by mistake, or refuse a real jailbreak.

Much of the game also sits off the chain. The chat, the AI model and the operator's hidden prompt all run on JailbreakMe's servers. You are trusting the team to run them as described.

The project's own sources disagree in places. Its older GitBook pages link to a different program address from the one on the live website. They also describe the first tournament as current. Treat the website as the newer source.

The token risk is plain. JAIL's one working use depends on tournaments, and those stopped in May 2025.

JailbreakMe alternatives

The closest comparison is Freysa, an AI agent on the Base network that guarded a prize pool players tried to talk it out of. The Block covered the game in November 2024. Freysa ran one house agent at a time. JailbreakMe's difference was the launchpad, which let anyone list an agent and take a share of the pool. Freysa is not on Solana, and we have not checked whether it still runs games.