3 min read
Research depthfirst ran an autonomous security agent across FFmpeg's 1.5 million lines of C code and produced 21 confirmed zero-days with reproducible proof-of-concept inputs, several dormant for over 20 years. Total inference cost for the full run: approximately $1,000.