Your code has vibes, my exploits have receipts
bugcrowd.com | blog | #ai-security | #bug-bounty | #appsec | #secure-coding | #exploitation | #vibe-coding | #application-security | #hardcoded-secrets | #opinion
Summary
Hacker Oxmoose argues AI-assisted coding produces code with vibes but little validation—hardcoded keys and unreviewed auth become low-hanging fruit for bug hunters.
- Published
- Collected
--- id: 199 title: "Your code has vibes, my exploits have receipts" source_domain: bugcrowd.com source_url: "https://www.bugcrowd.com/blog/your-code-has-vibes-my-exploits-have-receipts/" published_at: "2026-01-13 13:44" tags: ["ai-security", "bug-bounty", "appsec", "secure-coding", "exploitation", "vibe-coding", "application-security", "hardcoded-secrets", "opinion"] phying_url: "https://phying.com/item/199" lang: en --- # Your code has vibes, my exploits have receipts ## Summary Hacker Oxmoose argues AI-assisted coding produces code with vibes but little validation—hardcoded keys and unreviewed auth become low-hanging fruit for bug hunters. ## Intelligence Metadata - **Sources:** bugcrowd.com - **Published:** 2026-01-13 13:44 - **Original:** https://www.bugcrowd.com/blog/your-code-has-vibes-my-exploits-have-receipts/ - **Phying News:** https://phying.com/item/199