Fields Medal 2026 Leak: Peking University Alumni Among Winners

A front-end code slip has leaked the 2026 Fields Medal winners ahead of the official July 23 announcement. The leak, discovered in the ICM 2026 schedule page, reveals four laureates: Yu Deng, Hong Wang, John Pardon, and Jacob Tsimerman. Two of them — Deng and Wang — are alumni of Peking University, making this the first time two Chinese mathematicians share the award in the same year.

The leak surfaced when hidden lecture fields marked "HIDDEN" were spotted in the schedule's HTML. A curl command generated by Codex exposed the names. If confirmed, Hong Wang will become only the third woman to ever win the Fields Medal, a notable milestone for diversity in pure mathematics.

What This Means

The Fields Medal is the highest honor in mathematics, awarded every four years to mathematicians under 40. A leak of this nature is rare and underscores how even prestigious academic events are not immune to front-end security oversights. For the engineering community, it's a reminder that client-side data hiding is not access control — anything shipped to the browser can be extracted.

Technical Takeaway

Hiding content via CSS or JavaScript attributes (like hidden or display:none) does not prevent determined users from reading it. The ICM schedule team likely assumed the "HIDDEN" fields would not be rendered, but a simple API call or DOM inspection revealed the data. This is a classic case of security through obscurity failing in production.

If you're building developer tools or event platforms, treat all client-side data as public. Use server-side authorization for sensitive information, not front-end flags.