Google awarded a $250,000 bounty for a full-chain exploit to XBOW. They spent 6 days and $40,000 of compute with GPT-5.6 Sol to find a critical vulnerability in Chrome.

Chrome is one of the most hardened pieces of software on the planet, used by more than half the world’s population.

A full-chain exploit lets an attacker take total control of a machine, where they can read every email, password and bank login the user types. You don’t need to download anything or click a phishing link. Visiting the wrong site is enough.

The cost of finding truly critical vulnerabilities is collapsing, for attackers and defenders alike. Assume your software is exploitable.

Read more: https://xbow.com/blog/xbow-built-a-chrome-full-chain-exploit