haehaeYang

[POC_Crew @POC_Crew]

#POC2026 🏖️📦

Jihyeon Jeong(@symsool9143) - "Sand-Unboxing: Breaking the V8 Sandbox 10+ Times and Unveiling a Temporal Design Failure"

[haehaeYang @haehaeYang]

This was a target I had been determined to successfully exploit ever since Pwn2Own Berlin. I'm really happy to have wrapped up Pwn2Own on such a successful note!

[TrendAI Zero Day Initiative @thezdi]

🧨 A dynamite takedown of Dynamo in the AI Infrastructure category for a total of $40,000 and 4 Master of Pwn points by HaeJung Yang (@haehaeYang) of Out of Bounds (@oobs_io) #Pwn2Own

[haehaeYang @haehaeYang]

The whole process of finding this vulnerability and successfully exploiting it was so much fun. I'm really happy I pulled it off!

[TrendAI Zero Day Initiative @thezdi]

Out of Bounds (@oobs_io) results are confirmed as a Collision! HaeJung Yang (@haehaeYang), and ByungYoung Yi (@yibarrack) used 4 bugs - 2 of which were previously known. They still take home $15k and 3 Master of Pwn points in their exploit of LiteLLM in the #AIInfrastructure category. #Pwn2Own

[haehaeYang @haehaeYang]

@D0b6y 🥳👍👍🥳

[Out of Bounds @oobs_io]

Pure determination for the perfect finish. @haehaeYang successfully claimed our redemption in Berlin on the event's sole Dynamo entry. A massive win and a brilliant way to wrap up #Pwn2Own. 🚀

[TrendAI Zero Day Initiative @thezdi]

🧨 A dynamite takedown of Dynamo in the AI Infrastructure category for a total of $40,000 and 4 Master of Pwn points by HaeJung Yang (@haehaeYang) of Out of Bounds (@oobs_io) #Pwn2Own

[Out of Bounds @oobs_io]

Another win against LiteLLM. 4 bugs this time — 2 were collisions, but we're happy with the result. Also our first win in Ireland. 🎉 Kudos to @yibarrack and @haehaeYang. #Pwn2Own

[Out of Bounds @oobs_io]

We’re at Pwn2Own again!

Out of Bounds is bringing 3 entries to Pwn2Own Ireland 2026.

Full schedule:
https://t.co/MmkCFVmqsr
If you’re in Cork, hit me up!

And stay tuned for updates 👀

[Jihyeon Jeong @symsool9143]

A little research recap for 2026 so far:

• 8 v8CTF submissions (7 accepted, 1 pending)
• 9 V8 bugs
• 19 V8 SBX

Learned a lot digging into V8 this year. Still plenty more to explore :)

[haehaeYang @haehaeYang]

@symsool9143 👍👍👍👍👍👍

[haehaeYang @haehaeYang]

I’m glad I was lucky enough to succeed with a unique vulnerability without any collisions

[TrendAI Zero Day Initiative @thezdi]

Confirmed! haehae (@haehaeYang) of Out Of Bounds used a Path Traversal bug to exploit NVIDIA Megatron Bridge in the second round, earning $10,000 and 2 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin

[haehaeYang @haehaeYang]

My first Pwn2Own has successfully come to an end. The more I think about it, the more I feel like I’m a lucky person.

[TrendAI Zero Day Initiative @thezdi]

Confirmed! haehae (@haehaeYang) of Out Of Bounds chained 2 bugs (CWE-190, CWE-362) to exploit Chroma, earning $20,000 and 2 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin