5.6-sol in a single prompt was able to discover a zero-day in a web application (with no sourcecode provided, only known api urls) and I do not even have /cyber verification on my general purpose account. I wasn't even really tryign to "find" a zero-day it was just looking for bypassing a restriction... Instead of spending 10 minutes filling in a form I ended up having to spend an hour drafting a report and sending an email.