6 days and $40,000 of compute with GPT-5.6 Sol to find a critical vulnerability in Chrome, claiming Google’s first full-chain reward in 2026 for a vulnerability that would affect an estimated 1 billion users.
Highlights the opportunity for defenders to utilize these tools to secure their software to unprecedented levels:
Greg Brockman
@gdb
Oege de Moor @oegerikus
For the second time in Google Chrome’s history, Google awarded a $250,000 bounty for a full-chain exploit… to @Xbow. Here’s the full story:
At an all-hands at the start of 2026 in Malta, I set the team a crazy challenge. A full-chain exploit of Chrome by the annual Black Hat
At an all-hands at the start of 2026 in Malta, I set the team a crazy challenge. A full-chain exploit of Chrome by the annual Black Hat
5:43 PM UTC · Oct 13, 2026 · 432.5K Views
2012595.1K1.2K