arxivcs.CRcs.AI2026-06-25
Chai: Agentic Discovery of Cryptographic Misuse Vulnerabilities
Corban Villa, Sohee Kim, Austin Chu, Alon Shakevsky, Raluca Ada Popa
AI-assisted vulnerability discovery has proven effective for bug classes like memory safety, where instrumentation confirms memory violations and efficiently filters false positives. Many dangerous vulnerability classes, such as cryptographic misuse, however, lack any comparable…