Dominik Blain

LLMs, guided by deterministic model checker feedback, can autonomously discover novel vulnerability classes in complex systems, even surpassing human-written specifications.

Broken Quantum presents Broken Quantum, the first comprehensive formal security audit of the open-source quantum computing simulator ecosystem, and identifies the first documented case of vulnerability transfer from a commercial quantum framework into US national laboratory infrastructure.

Despite being able to identify vulnerabilities in review, LLMs generate vulnerable code by default more than half the time, and even the best model still produces vulnerable code nearly 50% of the time.