Xbow breaks down the $40K GPT-5.6-sol API bill behind its full-chain Chrome exploit
moyix · x · 2026-11-03
After Xbow built a full-chain Chrome exploit using GPT-5.6-sol for about $40,000 in API usage, moyix published an itemized breakdown. The cost tree: vulnerability search ate $21.98K (55%) — including $6.95K on an initial (contaminated) sandbox search, $5.25K Crashpad search, $3.86K renderer RCE, $3.87K V8 escapes and $2.05K V8 corruption; exploit engineering took $9.32K (23%) — $5.89K Crashpad exploit, $2.38K renderer exploit with Windows port, $1.05K chain assembly; orchestration and backup routes consumed $8.79K (22%), with backup routes alone burning $6.78K.
More from coding & agent
- Berkeley's GEPA-Curator filters noisy failure signals to boost agent prompt optimization — Berkeley · 2026-11-03
- Default AI agents to serverless, then let production data decide what moves — rseroter · 2026-11-03
- Skill-centric training beats task-centric for small web agents across 4 benchmarks — anmarasovic · 2026-11-03
- Your agentic coding trajectories are a treasure, argues new blog post — Bartaseth · 2026-11-03
- Dev argues agents make experimentation so cheap you should be 10x more scientific — zack_overflow · 2026-11-03
- Anthropic launches Message Threads in public beta, cutting long-conversation latency — ClaudeDevs · 2026-11-03