XBOW earns Google's $250,000 bounty with a six-day Chrome exploit

Founder Oege de Moor set the challenge; XBOW researchers used OpenAI's public GPT-5.6-Sol model to build the awarded chain from August 2nd to August 7th.

By · Published

Primary source: XBOW Labs

Why it matters

XBOW's Chrome chain demonstrates AI-assisted vulnerability research beyond web apps, while its own account makes clear that human researchers directed the work and assembled the exploit. The product test is whether that expertise can be repeated across other compiled software.

XBOW earns Google's $250,000 bounty with a six-day Chrome exploit — Founder Oege de Moor set the challenge; XBOW researchers used OpenAI's public GPT-5.6-Sol model to build the awarded chain from August 2nd to August 7th.

XBOW earned a $250,000 Google reward for a Chrome exploit that its researchers built in six days, turning a web page into code execution beyond the browser's renderer sandbox. Founder and CEO Oege de Moor (@oegerikus) set the challenge as part of a push to take XBOW's AI-assisted security research beyond web applications and into desktop software, servers and connected devices.…

Reader comments

Conversation for this story loads after sign-in.