Skip to content
Original
IndustryGreg Brockman · XRelayed· @gdb·· 3 days agoPicks

4.4K views · 48 likes · 3 reposts (at collection)

XBOW earns Google Chrome full-chain bounty using GPT-5.6 Sol

Who
XBOW
What
won Google’s first full-chain Chrome exploit bounty under its 2026 rules

What happened

Greg Brockman highlights XBOW’s report of finding a critical Chrome vulnerability with GPT-5.6 Sol in 6 days using $40,000 of compute, earning Google’s first full-chain reward in 2026 for an exploit affecting an estimated 1 billion users. He emphasizes the opportunity for defenders to use these tools to secure their software. In the quoted post, @oegerikus reports a $250,000 bounty for the Chrome on Windows exploit.

Why it matters

The reported six-day effort and $40,000 compute cost illustrate how AI-assisted vulnerability discovery could change the resources defenders need to examine their own software.

The story so far

XBOW won a $250,000 Google bounty for a full-chain exploit affecting Chrome on Windows, the first awarded under Google’s 2026 rules, according to @oegerikus’s account shared by Greg Brockman. Brockman said XBOW found a critical Chrome vulnerability using GPT-5.6 Sol in six days with $40,000 in compute, while the quoted account said Brendan and the agents built a new exploit in six days. Brockman highlighted an estimate that the exploit affected 1 billion users and said the result showed an opportunity for defenders to use these tools to secure their software.

Keep reading

Latest daily · Issue 24NVIDIA and AI4Bharat Introduce Nemotron-pretraining-Indic-v1 and an Open Data Generation Pipeline

Trending now

  1. 1Meta Releases Muse Spark Open With Mac and Cloud Support, Topping US Open-Weight Index
  2. 2Google Launches Gemini 4 Argon Globally, Expands Paid Access as Benchmark Results Vary
  3. 3OpenAI Updates GPT-6 Astra Pro in ChatGPT With Parallel Agents and Faster Responses
  4. 4Meta’s New Business Terms Raise Dispute Over Website Crawling and AI Training Rights

Tomorrow at 08:00, a briefing like this arrives in your inbox.

The same kind of briefing as the one above: a few stories worth reading. Free. Mail starts after you confirm, and every letter has a one-click unsubscribe. Read a past issue · 2026-10-17