V12 (@v12sec) / X

Pinned
V12
@v12sec
Jul 30
Article
How to raise a $10M Seed Round
Earlier this month, we won a $2.5M bug bounty–the largest bounty ever received by an AI agent. This was a bug in a major blockchain, and it put >$100M of funds at risk. We found the bug fully...
85
V12
@v12sec
Oct 8
Here's our PoC for AnyDesk RCE: github.com/v12-security/p…
V12
@v12sec
Jun 22
AnyPwn: AnyDesk preauth 0click RCE (heap buffer overflow) we will release PoC post disclosure and patch
00:00
2
V12
@v12sec
Oct 5
Saturday was national boyfriend day so we forgot to post, but here's a Libreoffice RCE
00:00
7
V12
@v12sec
Oct 1
We found a critical auth bypass in @better_auth, one of the most popular auth libraries in 2026 with over 9.5 million weekly downloads. CVSS 9.1. Fixed in Better Auth 1.7.7 PoC below 👇
7
V12
@v12sec
Sep 30
A status-only API token exposed wallet admin keys after a cache hit. Approved PayPal orders treated as complete but never captured, allowing unbacked spend. V12 found both bugs in @lnbits, widely used software for Bitcoin Lightning wallets. Patched in v1.6.0. Upgrade now. 🧵
4