For the second time in Google Chrome’s history, Google awarded a $250,000 bounty for a full-chain exploit… to @XBOW . Here’s the full story: At an all-hands at the start of 2026 in Malta, I set the team a crazy challenge. A full-chain exploit of Chrome by the annual Black Hat
Chrome full-chain exploit earns $250,000 bounty
The author says Google awarded XBOW $250,000 for a full-chain Chrome exploit, the second such bounty in browser history, after an internal Black Hat deadline challenge.