Tools AI-Found Vulnerability Register aifv-0059
Register entry
AIxCC finalists surfaced 18 previously unknown real-world flaws and patched 11 of them
- Project
- AIxCC challenge projects (open-source)
- Finder
- AIxCC finalist cyber reasoning systems
- Autonomy
- fully autonomous cyber reasoning systems in competition conditions
- Evidence tier
- Aggregate claim
- Bounty
- Paid, $8,500,000 (competition prizes: Team Atlanta $4m, Trail of Bits $3m, Theori $1.5m)
- Confidence
- SINGLE
What happened
Seven finalist systems discovered 54 of the synthetic vulnerabilities planted in the challenge projects, patched 43 of those, and surfaced 18 real-world flaws of which 11 were patched, the rest routed to maintainers. The mapping from finding to CVE identifier is still open, so the 18 enter as one row.
Credit as recorded: DARPA announcement, DEF CON 33. Date basis: DEF CON 33 final, August 2025.
Sources
- Team Atlanta, Atlantis CRS repositoryraw.githubusercontent.com/Team-Atlanta/aixcc-afc-atlantis/ma…
One record from the AI-Found Vulnerability Register, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 19 September 2026