Anthropic's Claude Opus with crafting a complete V8 exploit chain targeting an outdated Chrome 138 instance bundled in Discord, exploiting CVE-2026-5873 for remote code execution on macOS. After a week of guidance involving 2.3 billion tokens, over $2,200 in API costs, and roughly 20 hours of human intervention to navigate dead ends, the AI-generated code successfully achieved RCE by opening the macOS Calculator app. The multi-phase exploit leveraged a Turboshaft WebAssembly out-of-bounds vulnerability, heap spraying, sandbox bypass techniques, and Wasm-specific primitives to escape Chrome's sandbox. The experiment highlights how AI can accelerate n-day exploit development for unpatched Chromium-based apps, though it still required substantial human oversight.

Future models may eliminate the need for such hand-holding, potentially enabling faster attacks and urging quicker patching practices.