Post

How we chained three vulnerabilities into a full Chrome exploit in just 6 days—claiming Google’s first $250,000 full-chain reward of 2026 for an attack affecting an estimated 1 billion users. 🧵

2/ AI agents using OpenAI’s gpt-5.6-sol model searched source code, tested hypotheses, built proofs of concept, and developed exploit stages. Reconstructing usage from the archived Codex logs puts the six-day campaign at roughly $40,000 in API charges.

3/ The chain crossed two sandbox boundaries in three vulnerability stages: 1. Maglev reused a mutable boxed number during deoptimization 2. Animated WebP combined cached geometry with changed image bytes 3. Crashpad trusted a failed read from a supposedly frozen renderer

4/ Stage 1, Mutating the Immutable: the vulnerable Maglev path made a mutable number look like exactly the sort of immutable constant the compiler was allowed to reuse—giving reliable memory access from JavaScript throughout the V8 sandbox.