Summary

• The heap stores metadata inline and recycles chunks aggressively; that is the whole attack surface.
• tcache made attacks easy; key + safe-linking pushed back; hooks were removed — the arms race in miniature.
• Hardening delays attackers; memory-safe languages retire the bug class.