Wow very great write up, this is incredible analysis. Its these kinds of exploits that scare me away from security due to the vast knowledge required. I for sure didn't understand all of it as im not knowledgeable on compiler theory or v8 internals but the article had a very good overview on all the subjects, i even learned new things about JS as a web dev!
Saving this post for later reference thanks