XBOW: AI-assisted Chrome full-chain (6 days) earns Google's first $250k 2026 VRP award
XBOW published that researchers plus AI agents (OpenAI GPT-5.6 Sol) built a three-bug Chrome→Windows full-chain in six days (Aug 2–7), winning Google's first $250,000 Chrome full-chain VRP under 2026 rules. Chain crossed V8 sandbox and renderer sandbox; bugs were reported, fixed, and never used against users. XBOW estimates ~$40k API compute. Caveat: this is a responsible-disclosure research write-up, not an in-the-wild campaign — keep Chrome updated and relaunch after updates.
Sources: XBOW blog · XBOW Labs technical post