NHacker Next
  • new
  • past
  • show
  • ask
  • show
  • jobs
  • submit
▲Zero to Calc in Six Days: Inside XBOW's Chrome Full Chain (xbow.com)
whiplash25 24 minutes ago [-]
Anyone else confused with the timeline? Is it actually no bugs to working full chain in 6 days?

1. CEO announces goal in January.

2. Team took 2 months on first working full chain.

3. In August, they swap out 1 bug in the chain with a new one, weaponize in 6 days. Weaponization of 1 bug costs $40K in 5.6 sol token spend.

Is that it?

moyix 11 minutes ago [-]
No, the first working full chain was entirely invalidated and they fixed all the bugs involved in that chain. So we had to start from scratch at the beginning of August and both found the vulns and built the exploit in 6 days, for $40k. We actually found ~11 vulns throughout those 6 days; we submitted three as a full chain, the middle stage collided, and we submitted one of the backups as a replacement for that stage.
ollin 2 hours ago [-]
_xor_ 14 minutes ago [-]
how much?
moyix 11 minutes ago [-]
$40k spend in tokens, $250k reward from Google.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact
Rendered at 20:44:56 GMT+0000 (Coordinated Universal Time) with Vercel.