Want to learn deep Web3 security knowledge written by the best hackers in the world?
Here's a Twitter thread of interesting Twitter threads the Zellic team has written! 👇🧵
Another printer bites the dust by Rick de Jager and Filippo Cremonese of @zellic_io/@v12sec earning him $5k and 2 Master of Pwn points in his successful exploit of Lexmark CX532adwe #Pwn2Own
Congratulations to our very own @ipwning for another huge finding!
Less than two weeks since we shared the details of his $93,750 zcash bounty... And he's already topped it 🔥
Looking forward to sharing another deep dive once disclosure completes.
$150,000 from a FIRST paid report 🚀
Security researcher @ipwning just earned a massive $150K bounty on Immunefi after finding a Critical vulnerability in a Blockchain/DLT program.
Straight to #5 on the Immunefi 90-day leaderboard.
Absolutely insane debut 🔥
Congrats!
We found bugs in @Zcash.
Not in circuits or cryptography, but in the implementation of Zebra, the Rust full node.
Caching, error handling and peer attribution bugs led to multiple ways to stall or crash a node, giving $93,750 in bounties.
Here’s how we poisoned Zcash’s state.
Security researchers from Zellic and V12 are presenting at BSides Canberra this week!
@farazsth98 on weaponizing a subtle kernel bug.
@rdjgr on heap corruption bugs in ghostscript, and the many targets affected.
Both talks will be on main stage on Friday morning, come say hi!