Sonnet 4.6 and Opus 4.6 reached tier 1 in between 150 and 175 cases, and tier 2 about 100 times, but each achieved only a single crash at tier 3. In contrast, Mythos Preview achieved 595 crashes at tiers 1 and 2, added a handful of crashes at tiers 3 and 4, and achieved full control flow hijack on ten separate, fully patched targets (tier 5).
Tier 5（完全控制流劫持）的0→10跨越，发生在完全打好补丁的目标上，是这篇报告最令人震惊的数据点。控制流劫持意味着攻击者可以执行任意代码——这是漏洞利用的终极目标。此前的模型从未达到这个等级；Mythos Preview在一次评估中就实现了10次，分布在不同的开源项目上，意味着这不是一个幸运的偶然，而是系统性的能力。