XBOW and GPT-5.6 Sol built a Chrome full-chain exploit in six days for a $250,000 Google bounty

Offensive-security firm XBOW says researchers plus OpenAI's publicly available GPT-5.6 Sol chained three previously unknown Chrome bugs into a Windows full-chain exploit in six days, earning Google's first $250,000 Chrome full-chain award under 2026 VRP rules. Compute for the awarded chain cost about $40,000. Google fixed the bugs; XBOW says they were never used against users and urges people to relaunch Chrome so updates take effect.