fr0g(@dafr0g_):Last year @trailofbits won second place in the AIxCC and released buttercup. It's a tool they built during the challenge and released. I took that code and migrated it to golang. As any reasonable person would, i stripped out all the sandbox wrappers focusing only on the workflow. That code in combination with a fast, cheap, and intelligent model resulted in 5 verfied vulnerabilities across 25 git repos in less than 2 hours and cost about $3. Once verified i asked the model to write PoCs. It worked.

2026.08.11 15:46

Last year @trailofbits won second place in the AIxCC and released buttercup. It's a tool they built during the challenge and released. I took that code and migrated it to golang. As any reasonable person would, i stripped out all the sandbox wrappers focusing only on the workflow. That code in combination with a fast, cheap, and intelligent model resulted in 5 verfied vulnerabilities across 25 git repos in less than 2 hours and cost about $3. Once verified i asked the model to write PoCs. It worked.