Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days

Researchers at XBOW used a public OpenAI model to create a full-chain exploit for Google Chrome in six days. The exploit, which can run code on a Windows computer when a user loads a web page, was built by chaining three previously unknown Chrome bugs. The researchers utilized AI agents running OpenAI's GPT-5.6 Sol model to develop the attack. Google has confirmed the three bugs and fixed them, and has paid XBOW for discovering the vulnerabilities. The payout was the company's top amount, totaling $250,000. The exploit's development demonstrates the potential for AI to accelerate the discovery of complex vulnerabilities.