Breaking the reference SHA-3 implementation to construct second preimages, preimages, and RCE (!) in popular languages.
Absolutely incredible work by Nicky Mouha and Christopher Celi.

h/t HD Moore
https://eprint.iacr.org/2023/331.pdf