lucky noob hacker / The Amazing Digital Orange
Joined March 2023
- Tweets12
- Following63
- Followers613
- Likes40
The story behind the chrome full chain bonus,
we thought that we could get it using 1-day renderer exploit that I had + 0-day sbx that he found, but we got a reply that all the bugs used in the chain must be 0-days.
As I was working on an exploit of a different target, I couldn't spare any time for his work.
After a few days, I heard that he got a 0-day exploitable v8 bug from nebusec, so I was like "wtf, really?".
So, I joined him in finding v8 heap sandbox bug after finishing my work.
Then we've managed to find a non-duplicate v8 heap sandbox bug after 2,3 days, fuzzing and spending tokens all night.
Huge congrats to him for believing it was possible and putting in the work to make it happen.
We just received a $250,000 Chrome Full Chain bonus! 馃帀
We've claimed the second Full Chain bonus of 2026. Only two remain!
Under the rules, every vulnerability had to be a non-duplicate 0-day, and the entire exploit chain had to be completed before any of them were patched.
Huge thanks to @nebusecurity for discovering a V8 vulnerability in just a single day! Also, a big thank you to @_deayzl for collaborating with me on the V8 Heap Sandbox research.
P.S. KVM escapes have been getting a lot of attention. I actually captured the Full VM Escape flag in KVMCTF about three months ago. Hopefully, I'll be able to share that research soon, too!
deayzl retweeted
We just received a $250,000 Chrome Full Chain bonus! 馃帀
We've claimed the second Full Chain bonus of 2026. Only two remain!
Under the rules, every vulnerability had to be a non-duplicate 0-day, and the entire exploit chain had to be completed before any of them were patched.
Huge thanks to @nebusecurity for discovering a V8 vulnerability in just a single day! Also, a big thank you to @_deayzl for collaborating with me on the V8 Heap Sandbox research.
P.S. KVM escapes have been getting a lot of attention. I actually captured the Full VM Escape flag in KVMCTF about three months ago. Hopefully, I'll be able to share that research soon, too!
Personally, this is one of the most hilarious things happened in this defcon. Codex just invented a super jump and solved it.
When I used gpt-5.3, I had to focus on filtering out false positives. But now, just by prompting like "validate", it does the job by itself quite properly. And it is also interesting that just prompting with codex can still find sec-high vulns, even though Firefox was heavily audited by Mythos.
