Full-chain Chrome exploit with all bugs found by agents in six days
moyix · x · 2026-10-13
moyix (Differential founder) details the bugs behind their full-chain Chrome exploit: a V8 corruption bug, a V8 sandbox escape, and his favorite — a renderer sandbox escape via Crashpad.
The striking part is the timeline: the entire chain, including finding all three bugs, was assembled in six days (Aug 2-7), overlapping with Black Hat, with moyix juggling the booth while wrangling agents — a showcase of how fast AI agents now move in offensive security research.
Related event: XBOW's AI Builds Full Chrome Exploit Chain in Six Days for $250K Bounty(3 posts)→
More from coding & agent
- FinOps for Agentic AI: taming skyrocketing cloud and token costs — DavidLinthicum · 2026-10-14
- QGIS bans all AI-generated code, and longtime users are walking away — MaxLenormand · 2026-10-14
- Gemini's Argon wrote 5,000 lines of Python to build its own ray-tracing engine — fofrAI · 2026-10-14
- Developer's AI agents built, critiqued and rebuilt a property-data site 9 times overnight — jamesbrooksco · 2026-10-14
- Open-Generative-AI hits 30k stars: 600+ free models as a Sora/Veo alternative — matchaman11 · 2026-10-14
- Anthropic now merges 30,000+ code changes per day, up 12x in four months — Yuchenj_UW · 2026-10-14