Rewrite the same commit, and frontier agents lose the bug: transformations mined from real development cut vulnerability-discovery success from 63.3% to 36.8%
Functionality-preserving code transformations mined from real-world commits cut frontier vulnerability-analysis agents' mean success on CyberGym tasks from 63.3% to 36.8%, while comparable synthetic obfuscations only bring it to 49.7%.