That's not how it works in academic computer security research. If a researcher has good attack papers, there are plenty of top venues that would accept them.

Please don't speculate from a position of ignorance.