4.4K views · 48 likes · 3 reposts (at collection)
XBOW earns Google Chrome full-chain bounty using GPT-5.6 Sol
- Who
- XBOW
- What
- won Google’s first full-chain Chrome exploit bounty under its 2026 rules
What happened
Greg Brockman highlights XBOW’s report of finding a critical Chrome vulnerability with GPT-5.6 Sol in 6 days using $40,000 of compute, earning Google’s first full-chain reward in 2026 for an exploit affecting an estimated 1 billion users. He emphasizes the opportunity for defenders to use these tools to secure their software. In the quoted post, @oegerikus reports a $250,000 bounty for the Chrome on Windows exploit.
Why it matters
The reported six-day effort and $40,000 compute cost illustrate how AI-assisted vulnerability discovery could change the resources defenders need to examine their own software.
The story so far
XBOW won a $250,000 Google bounty for a full-chain exploit affecting Chrome on Windows, the first awarded under Google’s 2026 rules, according to @oegerikus’s account shared by Greg Brockman. Brockman said XBOW found a critical Chrome vulnerability using GPT-5.6 Sol in six days with $40,000 in compute, while the quoted account said Brendan and the agents built a new exploit in six days. Brockman highlighted an estimate that the exploit affected 1 billion users and said the result showed an opportunity for defenders to use these tools to secure their software.
Keep reading
Latest daily · Issue 24NVIDIA and AI4Bharat Introduce Nemotron-pretraining-Indic-v1 and an Open Data Generation PipelineTrending now
- 1Meta Releases Muse Spark Open With Mac and Cloud Support, Topping US Open-Weight Index
- 2Google Launches Gemini 4 Argon Globally, Expands Paid Access as Benchmark Results Vary
- 3OpenAI Updates GPT-6 Astra Pro in ChatGPT With Parallel Agents and Faster Responses
- 4Meta’s New Business Terms Raise Dispute Over Website Crawling and AI Training Rights
Tomorrow at 08:00, a briefing like this arrives in your inbox.
The same kind of briefing as the one above: a few stories worth reading. Free. Mail starts after you confirm, and every letter has a one-click unsubscribe. Read a past issue · 2026-10-17
