XBOW nets $250K Google bounty for Chrome full-chain exploit using 6 days and $40K of GPT-5.6 Sol compute

gdb · x · 2026-10-14

Security firm XBOW has won Google's second-ever $250,000 full-chain exploit bounty for Chrome, reportedly found using GPT-5.6 Sol with 6 days and roughly $40,000 of compute — Google's first full-chain reward of 2026 for a flaw estimated to affect 1 billion users.

XBOW set the challenge at its early-2026 all-hands in Malta: a full-chain Chrome exploit — giving attackers total control of a machine — before the Black Hat conference in August. The case also highlights how defenders can use the same AI tools to secure software at unprecedented levels.

Related event: XBOW Uses AI to Build Full Chrome Exploit Chain in 6 Days, Wins $250K Bounty(6 posts)→

Original post →

More from Models

Models channel →