That's not necessarily true. Who's to say the security researchers wouldn't have found it if they'd searched the code manually?

It's an AI security firm! You might just as productively ask "why did all the other engineers who ever looked at this code not find it, and why was Theori the one to actually surface it?".

I would have taken a LOT longer but often this kind of manual search is so tedious people just don't do it. LLMs don't get bored.

> LLMs don't get bored

They do not get bored like a human but they are trained on human language and replicate the same traits, such as laziness, and expressing boredom or annoyance (even if obviously they do not experience anything at all). It’s actually a lot of effort to get them to engage with things at a deeper level without skipping corners

I’m hardly going to simp for LLM tools but the fact that the bug existed and no one had reported it seems proof positive no one was about to find it without them

Yes, I agree. I'm not the GP poster.

Safer to assume at least one of NSA, Mosad and a few others were sitting on it for years.