Team claims $250,000 Chrome Full Chain bonus, second of 2026 with two slots left
moyix · x · 2026-10-09
A security team announced it has earned a $250,000 Chrome Full Chain bonus — the second full-chain claim of 2026, with only two slots remaining. Under the rules, every vulnerability had to be a non-duplicate 0-day, and the entire exploit chain had to be completed before any of them were patched.
The author credits @nebusecurity for finding a V8 vulnerability in a single day, and @deayzl for collaborating on V8 Heap Sandbox research. They also revealed they captured the Full VM Escape flag in KVMCTF about three months ago, with that research to be published soon.
More from Safety
- Could Looped Models Resist Distillation Attacks by Reasoning in Latent Space? — moyix · 2026-10-09
- Uncensored AI Hype in Japan Draws Jokes: 'He'll Be Arrested by Month's End' — BLUECOW009 · 2026-10-09
- Low-cost AI anti-abuse policy mocked, echoing watermark and Pangram detector backlash — QuintinPope5 · 2026-10-09
- $100,000 OPT Fee Proposal Would Cripple US Tech Leadership, Researcher Warns — anshulkundaje · 2026-10-09
- Ex-OpenAI researcher: staff fear speaking up, worry safety cuts happen behind closed doors — anshulkundaje · 2026-10-09
- Microsoft ships MXC: policy-driven execution containers for AI agents go GA on Windows 11 — danielhanchen · 2026-10-09