🥷 web3 hacker - 10 TOP 3 finishes 🦄 Leshrac Spammer 🦀 Breaking Rust programs with @spearbit @zenith256 @soloauditcom 🕊️ Building with @naakastudio
Joined January 2021
- Tweets2.9K
- Following198
- Followers1.5K
- Likes11.8K
Pinned Tweet
Had the best year again. Doubled my 2024 income over 1300 hours. 💰
Spent the last three months recharging - family time and a side project I've been building.
No $$ goals for 2026. This year I want to double the HOURS. ⏰
Splitting my time: Bug bounties and the side project.
Wanted to start in the new year but couldn't wait. Starting today. 🚀
Happy new year, may Devana guide you in your hunts!
Time to work! 🎯
Even tho everybody and their grandma is using AI to find vulnerabilities and do security reviews, I think there is still room for manual security reviews.
The models will only ever catch a certain set of vulnerabilities, since they are all trained on the same data. Sure this set will keep expanding, but I still think there is a room for high skill to find obscure vulnerabilities outside of this set that the models will not be capable to find (yet).
great to see so many researchers that were asking me for advice a year ago hitting it big today
warms my heart 💛
If you need a security review at Mythos level capabilities just DM me
The US government, citing national security authorities, has issued an export control directive to suspend all access to Fable 5 and Mythos 5 by any foreign national, whether inside or outside the United States, including foreign national Anthropic employees.
The net effect of this order is that we must abruptly disable Fable 5 and Mythos 5 for all our customers to ensure compliance.
Access to all other Claude models is not affected.
We apologize for this disruption to our customers. We believe this is a misunderstanding and are working to restore access as soon as possible.
Read our full statement: anthropic.com/news/fable-myt…
kriko.eth retweeted
🧙♂️Wise sage @krikoeth once sad:
🧠 Embrace the failure
📜 "This applies especially to audit contests. You work your ass off on an audit just to find out that you made a few cents in the end. That is the best thing t..."👇
web3-sec.gitbook.io/art-of-a…
kriko.eth retweeted
Zenith Security Researchers have all put in their 10,000 hours.
But they all started their security journeys at hour zero.
So we asked @krikoeth, @christianvari_, & @0xluk3 what they wish they’d known when they first started.
Here’s what they said.
RIP C4
After careful consideration, we’ve made the decision to wind down @code4rena. This community has meant a great deal to everyone who has been part of building it, and sharing this news is not easy.
Glad to have contributed to the security of this project, again 🫡
white hat?
The white hat has returned the funds in full, and has been awarded a bug bounty.
User funds are completely unaffected.
Our appreciation to the white hat for identifying the bug, securing the vulnerable funds before further damage could happen, and assisting us in strengthening our system.
Team is now working on deploying additional guardrails to prevent similar situations from happening again. We expect dango.exchange to resume operation within the day.
kriko.eth retweeted
🧙♂️Wise sage @krikoeth once sad:
🧠 Improve
📜 "I changed my process several times, in the beginning after almost every audit, until I found what suits me the best. Key insights from my process is analyse what you ar..."👇
web3-sec.gitbook.io/art-of-a…
You are the attacker
🧙♂️Wise sage @krikoeth once sad:
🧠 Do not audit
📜 "This means that audit to me signals some guy in suit checking if something is correct. You are not a unit test, you should not check if it is working correctly.You..."👇
web3-sec.gitbook.io/art-of-a…