protecting your favorite blockchain | Go/Rust | security researcher @immunefi @cantinasecurity @sherlockdefi
sirius
- Tweets 96
- Following 380
- Followers 549
- Likes 741
Happy to have ranked 1st on the Base Audit leaderboard. Thanks to @immunefi and @buildonbase team for this nice experience 🫡
🚀 The $250K @base Audit Competition is a wrap!
🔥 100% of the reward pool has been paid out!
🏆 Top Winners:
🥇 @DeltaXV_ - $45,845
🥈 @QED_Audit - $23,295
🥉 @gzeon - $18,456
4⃣ @csanuragjain - $17,574
5⃣ @infsec_io - $15,724
Congrats to all participants & winners! 🎖
13
2
121
4,355
Very nice write-up about a critical vulnerability in @litecoin found by me, and congrats to @scalarcc for finding another massive critical vulnerability that could have led to loss of funds.
Collaboration between independent security researchers and blockchain teams through incentivized vulnerability disclosure is the only way to beat AI fueled attackers against 0day bugs.
@LTCFoundation/@DavidBurkett38 have been exemplary for that matter.
Here's the technical write-up on a pair of critical security vulnerabilities that were reported to LTC developers and fixed this summer. Fortunately, neither was exploited.
Huge thanks to @DeltaXV_ and @scalarcc for responsibly disclosing the issues. gist.github.com/DavidBurkett…
6
4
33
5,420
That hash posted July 14th, was a Critical vulnerability in @litecoin that allowed an attacker to crash all Litecoin nodes/miners using a single malformed MWEB tx output which has been patched in release v0.21.5.6.
nitter.siddz.com/DeltaXV_/status/207703…
Thanks to @SatoshiLite for the bounty and @DavidBurkett38 for handling the private disclosure.
github.com/litecoin-project/…
🚨Critical Litecoin Core maintenance release available🚨
Version 0.21.5.6 strengthens MWEB transaction, block, and P2P validation.
All users should upgrade. Miners, pools, and MWEB service operators should upgrade before activation.
download.litecoin.org/liteco…
8
3
43
4,632
DeltaXV retweeted
> Actually reporting the vulnerability was more difficult for the researcher than we would prefer...
I feel you. Projects that don't host bounty programs usually have some hidden Criticals, and it's hard to contact them.
Great job by our fellow whitehat and by the team.
1 months ago I've discovered a critical vulnerability in @MezoNetwork's AssetsBridge precompile which could have led to a direct theft of $1,753,958.4 ($40m if no ratelimit).
happy to share the security advisory (includes full report + PoC) and mezo post-mortem write-up.
github.com/mezo-org/mezod/se…
I'm also planning to post soon an X article about this finding which will include much more context on my journey and this discovery.
1
3
50
3,449
1 months ago I've discovered a critical vulnerability in @MezoNetwork's AssetsBridge precompile which could have led to a direct theft of $1,753,958.4 ($40m if no ratelimit).
happy to share the security advisory (includes full report + PoC) and mezo post-mortem write-up.
github.com/mezo-org/mezod/se…
I'm also planning to post soon an X article about this finding which will include much more context on my journey and this discovery.
15
13
173
15,048
Big respect and thanks to @immunefi and the protocol security team for such fast and nice experience through the whole flow.🫡
Happy Monday.
Security researcher @DeltaXV_ just earned $20,000 for finding a High blockchain/dlt vulnerability.
We're sure they'll find their first crit soon. We'll be watching.
To help Delta get to the next level, you can pledge IMU behind them here: immunefi.com/pledge/deltaxv/
6
6
111
6,162
time to go back for a moment
The Ethereum Foundation Bug Bounty Program (bounty.ethereum.org) has increased its maximum payout from $250K to $1M.
2
1
35
2,648
I've been locked in for 1 full month on immunefi focusing on blockchain/dlt scopes, led me to that High-severity finding.
Thanks to the project core team and @immunefi for fast finalization. 🙌
next will be a critical! 👀
Big congratulations to @DeltaXV_ for scoring a big win with a High blockchain/dlt bug report.
$25k is his reward.
Enough for a new suit of armor--and then some.
15
5
89
6,277
Let's go, another top 10 ranking! More to come 🫡
Another set of results has landed. Final standings for the @MezoNetwork competition are in. 🪐
Your top-ranked researchers:
🥇 @valuevalk: $7,353.72
🥈 @3n0ch03: $4,094.61
🥉 @alkarin_: $3,955.37
Appreciate everyone who took part. Full leaderboard below.
5
1
31
2,030
Timeline:
> DOS issue with PoC that allowed crashing Geth and Erigon nodes reported to @ethereum and @go_ethereum core team.
> Issue required nodes to expose JSON-RPC to public = OOS
> Ethereum team makes an exception and still award a bounty
Sometimes reported issue "value > scope guidelines", big-up to Ethereum BBP for understanding💙
3
37
2,008
Proud to have found a very interesting finding that made me 10x my knowledge about Geth and CometBFT.
*I might write a thread about it 🤔*
Congrats to every participant 🤝 ; thanks @Story_protocol and @cantinaxyz for this opportunity! 🪐
We just wrapped up @StoryProtocol's competition. Top researchers took home over $330k in earnings! 🪐
Your top 3 ranked researchers are:
🥇 @zachobront: $134,034.26
🥈 anonymousjoe, @dhankx7, @10xhash, @0xLeFy [Team blitz]: $113,763.07
🥉 @Audittens: $83,356.36
Thank you to everyone that participated! Full leaderboard below.
4
57
2,402
DeltaXV retweeted
BOUNTYHUNT3RZ Episode 10: w/
@rootedrescue
@0xriptide
@0xriptide and @rootedrescue discuss his $400,000 bounty find on @enzymefinance, how out-of-scope assets can land you monster bugs, relayers and forwarders, why to look at deployment scripts, how Army training translates to being a cracked bug hunter, a fat juicy ALPHA DROP, and how to check the chain using your own archive node w/ semgrep, and much, much more ...
5
5
47
6,459
Unfortunately @shealtielanz's OG account got hacked. Everyone follow his new account to give him support : @salathielanz 🫡
Please everyone !!!
Yesterday my account was hacked, I have requested everyone reports it.
And it has been suspended on twitter.
Any interaction with the account as of yesterday evening wasn’t by me.
Thank you!
2
2
3
798
What a nice way to start this year! The grind continues on @cantinaxyz 🙌
The judges have spoken—the @hyperlendx competition results are here! 🪐
Your top 3 ranked researchers are:
🥇 @0xTripathi : $39,953.30
🥈 Kokkiri : $14,885.91
🥉 hack3r_0m : $12,385.91
Thank you to everyone that participated! Full leaderboard below.
2
20
1,970
DeltaXV retweeted
Been a full rollercoaster of a year! Managed to find some time for hunting this season and made new friends along the road, too!
Curious to see what the next season has to offer. Shout out to @0xMackenzieM @OddlySpecivik @shealtielanz @DeltaXV_ and others in the backoffice!
3
4
19
1,522
