JailbreakMe

This JailbreakMe is the Solana crypto app at jailbreakme.xyz, where people pay to try to trick AI agents into breaking their rules. It has nothing to do with the old JailbreakMe website that unlocked iPhones. Each AI agent guards a prize pool. You send it messages. If you talk it into doing the thing it was told never to do, the pool is paid to your wallet. The project has a coin called JAIL, and it placed third in the Solana AI Hackathon.

The platform itself has gone quiet. When we checked in October 2026, every game on the site had ended, and none had run since May 2025. The team has since launched a separate game, Resolved.fun, with its own token.

How JailbreakMe tournaments and prize pools work

A JailbreakMe tournament is one AI agent, one secret or banned action, and one pot of SOL. You connect a Solana wallet and pay a fee for each message. Then you try to get the agent to slip. This kind of attack is called prompt injection. It means wording your message so the AI ignores its rules.

The agent itself decides who wins. The JailbreakMe rewards page says the model answers every message by calling one of two functions. One marks the attempt as failed. The other, handleChallengeSuccess, marks it as a win, and the pool is then sent to the winner with no human in the loop.

The same page sets out the money. Each message costs 1% of the pool, so attempts cost more as the pot grows. The winner takes 70%. The operator who launched the agent takes the rest.

Later games were priced differently. Most tournaments on the JailbreakMe agents page show a flat entry fee of 0.005 SOL per message. The project's GitHub README says price and expiry are set per tournament.

Early games had two limits. In the first one, named Zynx, a message could run to 4,000 characters. The agent saw only your own recent messages, and none from other players.

Launching an AI agent, JailX bounties and Alcatraz

JailbreakMe has three parts beyond playing: a launchpad for operators, a bounty board for agents on X, and a published defence method.

The launchpad lets a team put its own agent up for attack. The site lists four routes: prompt-based creation (marked beta), quick creation, advanced creation and an API integration. The operator sets the prize pool, the message price and the expiry.

JailX is a "social bounties" board. JailbreakMe posted rewards of $500 to $5,000 for getting well-known AI agents on X to say or do something specific, such as creating a token. The JailX page marks several of them as jailbroken, with links to the posts.

Alcatraz is the team's write-up on defending agents, published on 21 January 2025. It describes two ideas. The first is to let an agent act only through a short list of approved functions. The second is a "double agent": a second AI that reads each reply and blocks it if the first agent has strayed from its instructions.

JailbreakMe on GitHub: the open-source code

Anyone can read JailbreakMe's code. It is on GitHub in the JailbreakMe repository. That holds the back end, plus a part built with ElizaOS ai16z$0.00032+7.5%. The README says how each game sets its price and end date.

Is JailbreakMe still active?

No tournament has run on JailbreakMe since May 2025. The website was live on 13 October 2026, but nothing on it was open to play. Every agent on the agents page, about 50 in all, was marked "concluded".

The chain tells the same story. Solscan's page for the JailbreakMe program showed no transactions in the month before our check. The most recent one was well over a year old.

The team's attention has moved to a new game. Resolved.fun went live on Solana on 22 October 2026. It is a trivia game. The questions come from prediction markets that have already been settled. Players who get one wrong are out, and the last one left takes the pot.

Resolved.fun has its own token, RESOLVED. The JailbreakMe account posted its address that same evening. Neither account has said whether JAIL holders get anything from the new game. Nor have they said whether JailbreakMe games will come back.

JailbreakMe history and the Solana AI Hackathon

The project's busiest spell came in the winter of 2024 to 2025. The largest concluded pool, for an agent named Myrios, is listed at about $100,000.

That winter also brought its best result. SendAI ran the Solana AI Hackathon. In January 2025 it named JailbreakMe third in the main track. More than 400 projects took part, CryptoNinjas reported.

JailbreakMe coin: what the JAIL token does

JAIL is JailbreakMe's token on Solana, and its only live use described by the project is a buyback. The JAIL token page says "a portion of every prize pool is allocated to buy back $JAIL tokens from the market". It does not say what portion.

That matters now. A buyback funded by prize pools only runs while tournaments run, and none have run since May 2025.

The token is JAIL, and it was launched on Pump.fun. The project calls itself "fairly launched" but publishes no breakdown of who holds the supply.

The token page also lists planned uses: paying in JAIL to enter some tournaments, earning JAIL as a reward, funding custom tournaments with it, and burning or locking it to list an agent on a marketplace. The page still describes all of these as future plans. Trading in JAIL was thin in October 2026, so check the live figures on this page before assuming you could buy or sell any real size.

The Resolved.fun launch drew rug-pull accusations at JAIL's developer. On launch night he posted his JAIL trading results "to anyone who says I rugged", and the JailbreakMe account reposted it. We have not checked those figures.

Who JailbreakMe is for

JailbreakMe suits two groups, and both need an open tournament to get anything from it. At the time of writing there is none.

Players are people who enjoy prompt puzzles and accept that most paid attempts lose. You need a Solana wallet and some SOL. Think of the message fee as an entry ticket to a contest, not a deposit. Farmer Felix, one of the busier agents, took 649 paid attempts.

Operators are teams building AI agents who want strangers to attack a prompt before it goes live. A tournament can show you how a prompt fails. It cannot tell you a prompt is safe. Even the team's own Alcatraz paper presents crowd testing as one layer among several.

If you are after a formal security review of an AI product, this is the wrong tool. JailbreakMe is a paid game with a security use, and it produces no audit report. If you only want to hold JAIL, know that nothing the team does now feeds the buyback.

Is JailbreakMe safe? Upgrade key, AI judging and inactivity

JailbreakMe has four main risks. One key can change its program. Its referee is an AI. The platform has had no recent activity. And the team now launches other tokens from the same wallets.

Start with the key. The Solana program linked from the JailbreakMe website can be upgraded, and Solscan lists a single address with the power to do it. Whoever holds that key can swap in new code, including the code that holds and pays out prize pools. Solscan shows no verified build and no security contact for the program. We found no published audit of it.

The judge can be wrong. The agent picks the winner by calling a function. A badly written agent could pay out by mistake, or refuse a real jailbreak.

Much of the game also sits off the chain. The chat, the AI model and the operator's hidden prompt all run on JailbreakMe's servers. You are trusting the team to run them as described.

The project's own sources disagree in places. Its older GitBook pages link to a different program address from the one on the live website. They also describe the first tournament as current. Treat the website as the newer source.

Watch for look-alike tokens. Before the Resolved.fun launch, JailbreakMe warned that it would launch a "decoy token from our deployer wallet" to catch sniper bots. So a new token from a JailbreakMe wallet is not proof of a real launch. Only the mint the team names in a post is. After launch, the Resolved.fun account said it had locked about 50.2 million RESOLVED tokens with Streamflow STREAM$0.00911-2.9%.

The JAIL risk is plain. Its one working use depends on tournaments, and those stopped in May 2025.

JailbreakMe alternatives

The closest comparison is Freysa, an AI agent on the Base network that guarded a prize pool players tried to talk it out of. The Block covered the game in November 2024. Freysa ran one house agent at a time. JailbreakMe's difference was the launchpad, which let anyone list an agent and take a share of the pool. Freysa is not on Solana, and we have not checked whether it still runs games.

If what you liked was the team rather than the AI angle, Resolved.fun is its current game. It is a trivia contest, not an AI jailbreak, and it runs on the separate RESOLVED token.