Today for AI
HOT RADAR
agentHEAT 14.5°

AI CLUSTERED EVENT · 10/14/2026

XBOW AI Agent Builds Chrome Full-Chain Exploit in Six Days, Earning $250k VRP Reward

1 reports archived1 independent sourcesupdated 10/14/2026, 02:37:45
Synthesis & Latest Updates
1 Sources Cross-Validated

AI security firm XBOW used its autonomous agents to construct a Chrome full-chain exploit in just six days, combining vulnerabilities in the V8 compiler, WebP decoder, and Crashpad to escape the renderer sandbox. This achievement earned the first $250,000 reward under Google's new VRP rules and demonstrates that AI-driven attack speed is now orders of magnitude faster than traditional human teams, significantly lowering the barrier for advanced vulnerability discovery.

LATEST/AI security firm XBOW used its autonomous agents to construct a Chrome full-chain exploit in just six days, combining vulnerabilities in the V8 compiler, WebP decoder, and Crashpad to escape the renderer sandbox. This achievement earned the first $250,000 reward under Google's new VRP rules and demonstrates that AI-driven attack speed is now orders of magnitude faster than traditional human teams, significantly lowering the barrier for advanced vulnerability discovery.

HEAT TRENDHourly heat curve

2 fully observed hours
Fewer than 3 fully observed hours; trend not plotted yet.

TIMELINECoverage timeline

Total 1 reports · Latest first
  1. Hacker News AIT2·88 pts
    • XBOW agents completed a Chrome full-chain exploit in 6 days, vastly outperforming the typical 6-9 month timeline for human teams.
    • The chain combined bugs in the V8 compiler, animated WebP decoder, and Crashpad memory safety mechanisms.
    • This marks the first $250,000 full-chain reward issued under Google's updated VRP rules introduced in April 2026.
    • AI significantly lowers the barrier for advanced vulnerability discovery, forcing defenders to reassess existing security boundaries.
XBOW AI Agent Builds Chrome Full-Chain Exploit in Six Days, Earning $250k VRP Reward | Today for AI