Is it true that current LLMs can find bugs in complex codebases? I mean, they can also find bugs in otherwise perfectly working code

With some luck, yes. I’ve had o3 in cursor successfully diagnose a couple of quite obscure bugs in multithreaded component interactions, on which I’d probably spend a couple of days otherwise.