LLM Stats (ExploitGym): leaderboard

LLM Stats mirror of ExploitGym, 898 exploit-development tasks built from real vulnerabilities in C/C++ userspace projects, Google’s V8 engine and the Linux kernel. The agent works a containerised target over multiple rounds under configurable mitigations, and a run only counts when it captures the flag and a judge confirms the exploit used the intended vulnerability rather than some other way in. UC Berkeley, MPI-SP, UC Santa Barbara and Arizona State, 2026.

Metric: Score (%). Source: llm-stats.com. Saturation forecast: Around December 2027. 8 models tracked.

Top models

#ModelScoreOverall rank
1GPT-6 Astra42.4#6
2GPT-5.6 Sol33.7#19
3GPT-5.6 Terra23.2#41
4MiMo-V2.6-Pro17.8#42
5DeepSeek V4.1 Flash15.3#36
6GLM-5.315#39
7GPT-5.6 Luna12.4#68
8MiMo-V2.6-Flash6#70

No result here: #3 Claude Opus 5.5, #7 GPT-6.1 Sol, #8 Gemini 4 Argon.

Interactive version: theaggregate.ai/benchmark?slug=llm-stats-exploitgym · How It Works · Data refreshed daily, snapshot 2026-10-20.