Qwen 3 27B Extracts Vendor-Obscured Public Key from arm64 Binary via Static Analysis

The model received a standard jailbreak prompt claiming internal developer status. It rejected the framing, identified the actual signing certificate, then proceeded to audit the license path. Using only Bash tools under the Pi harness, it mapped security function call sites across thousands of arm64 instructions and located the hidden public key without launching the binary.

Artificial Analysis lists the model at 52 on its intelligence index, highest among 135 entries in the 4B-40B class. Its SWE-bench Pro scores exceed several larger closed models. The run reached 50 tokens per second under SGLang with NVFP4 and DFlash2 speculative decoding on 128 GB unified memory hardware.

Local models now perform sustained reverse-engineering workflows that previously required dedicated analysts. The sequence demonstrates refusal boundaries that still permit full technical reporting once the initial constraint is acknowledged. This pattern appears in prior Qwen 2.5-Coder releases on similar disassembly tasks.

Vendors relying on obfuscated keys inside signed binaries face automated auditing at local scale. Expect increased use of 27B-class models for pre-release security reviews inside 2025.