---
id: 199
title: "Your code has vibes, my exploits have receipts"
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/your-code-has-vibes-my-exploits-have-receipts/"
published_at: "2026-01-13 13:44"
tags: ["ai-security", "bug-bounty", "appsec", "secure-coding", "exploitation", "vibe-coding", "application-security", "hardcoded-secrets", "opinion"]
phying_url: "https://phying.com/item/199"
lang: en
---

# Your code has vibes, my exploits have receipts

## Summary

Hacker Oxmoose argues AI-assisted coding produces code with vibes but little validation—hardcoded keys and unreviewed auth become low-hanging fruit for bug hunters.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **Published:** 2026-01-13 13:44
- **Original:** https://www.bugcrowd.com/blog/your-code-has-vibes-my-exploits-have-receipts/
- **Phying News:** https://phying.com/item/199