“Every bug found is one step closer to digital security” @HackenProof Security Researcher

Joined August 2020
📣📣📣 Calling all Chrome bug hunters! 📣📣📣 Rules updates: We're rewarding more types of deep security research, recognizing high-value fixes across more severity tiers, and providing new opportunities for researcher recognition. For details, see our latest blog post 👇 bughunters.google.com/blog/c…
3
35
1
344
17,945
Alhamdulillah I have been rewarded with $$$$ Write-up is now available you can read it here medium.com/@Tyrion404/i-coul…
5
13
251
6,901
Wtf is this 😂😂
13
4
5
119
19,738
IDor + Missing Authorization Write-up For Critical Bug is now available medium.com/@Tyrion404/zero-p… Follow me to stay updated with more Findings
Alhamdulillah I’ve had 10+ vulnerabilities accepted by AT&T, across Critical, High, and Medium severity, which helped me reach the Top 5 researchers on the AT&T 2026 leaderboard Alhamdulillah, also rewarded with $$,$$$ 🔥🔥🔥🔥
5
18
158
8,119
0x403for retweeted
Second bounty. Everyone chains SSTI to RCE — I chained it to account takeover instead. $1,000. Write-up 👇 medium.com/@HariHax/everyone… #bugbounty #cybersecurity #infosec
5
23
232
12,518
0x403for retweeted
FROM INTERNET 1)The Art of Business Logic — When the Checkout Got the Price Wrong zuksh.medium.com/the-art-of-… 2)How a “Draft Auto-Save” Feature Exposed Confidential Enterprise Board Documents leading to $4,500 Bounty medium.com/@t4nv1/how-a-draf… 3)How a Simple IDOR Led to Full Account Takeover medium.com/@edemzayaniyt/how… 4)Understanding IDOR: Breaching Applications by Exploiting Logic Flaws medium.com/@danielcostacm00/… 5)How 8 of the Top 20 HackerOne SSRF Reports Escalated to Cloud Credentials Leaks medium.com/codetodeploy/ssrf… 6)More Criticals, Less Dopamine dhakal-ananda.com.np/misc/mo… 7)How an Unsanitized Header Generated a $6,000 Bounty via Cache Poisoning medium.com/@t4nv1/how-an-uns… 8)Unauthenticated Strapi Relational-Filter Leak → Super-Admin Takeover → Server-Side Code Execution medium.com/@redhunter01/unau… 9)How Broken OAuth Flows Turn Into One-Click Account Takeovers medium.com/@tanvir.infosec/h… 10)AD Enumeration & Attacks — Skills Assessment Part II medium.com/@Psychopath-Trave… #bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity
19
61
3,534
Write-up For First Accepted Bug is now available you can read it here medium.com/@Tyrion404/from-z… Follow Me to Stay updated with more Findings
Alhamdulillah I’ve had 10+ vulnerabilities accepted by AT&T, across Critical, High, and Medium severity, which helped me reach the Top 5 researchers on the AT&T 2026 leaderboard Alhamdulillah, also rewarded with $$,$$$ 🔥🔥🔥🔥
9
21
219
13,795
0x403for retweeted
Hoje quero apresentar para vocês @zseano , um hacker que conta com: - Ex Bug Hunter Fulltime na Amazon - Ranking mundial - +$800k em recompensas - Um livro que ensina sua metodologia E o melhor de tudo? Ele tem um site sobre como isso tudo foi feito. bugbountyhunter.com
10
33
536
25,011
0x403for retweeted
Found a UXSS in Google Translate that allowed JavaScript execution on any domain with reflected input. $8,500 bounty from Google. 🐛💰 Writeup → r3dpars3c.github.io/writeups… #BugBounty #XSS #UXSS @Hacker0x01 @LiveOverflow @Bugcrowd @zseano @intigriti @InsiderPhD @yeswehack
12
109
2,661
Today, HackenProof turns 9. 🎉 Since 2017, we’ve come a long way: from our first researcher joining the platform to a global community of 82,000+ security researchers. From our first valid vulnerability to 85,000+ validated reports and $26M+ in rewards paid to security researchers. So, for our birthday, we decided to dig through the archives and see where it all started. Here are some of our favorite firsts: 🔹First researcher to join HackenProof – @jackhcable 🔹First valid vulnerability submitted – hackenproof.com/hackers/isha… 🔹First Critical vulnerability discovered – @aboul3la 🔹First major blockchain program launched – @vechainofficial 🔹First Web2 program launched – ttn.global 🔹First crowdsourced audit launched – @auroraisnear 🔹First $1M bounty payout – hackenproof.com/hackers/blaz… 🔹First blockchain cybersecurity education partnership – @hackthebox_eu 🔹First HackenProof podcast episode featuring @gkrastenov Every step of this journey was built together with our partners, customers, team members, and the security community who trusted us along the way. A special thank you to every researcher who has been part of the HackenProof journey. Your reports, feedback, and collaboration continue to shape the platform we build together. 9 years down – and we’re just getting started. 🚀 🔗 Share and celebrate with us → xitter.cf/intent/tweet?text=Cele…
15
13
3
103
3,326
0x403for retweeted
1/ Meet M1llionz (RichMilly666), a French cybercriminal allegedly laundering assets from two violent home invasion robberies in France in April 2026 that netted $667K total, with a history of openly posting about bank and retail fraud on social media. My work has led to a $93K Tether freeze directly tied to these attacks so far.
621
820
168
8,787
1,558,134
0x403for retweeted
Onde ler bons reports e melhorar MUITO em Bug Bounty? - Reports da Google (ouro) > bughunters.google.com/report… - Site com 1K de reports organizados + API bug-bounty-disclosures.verce… - Reports escolhidos a dedo por @busf4ctor (ref global e br) > bugbountydaily.com
2
104
1
644
26,864
0x403for retweeted
Hello again. I think this is the best write up I wrote . the full write-up here: zuksh.medium.com/the-art-of-…
Alhamdulillah.🤍 Happy to share that another public bug bounty report has been accepted on @YesWeHack. Another 4-digit bounty. #BugBounty #BusinessLogic #CyberSecurity #AppSec #YesWeHack
2
14
142
9,261