May 205 min readThe Art of Judging Bug BountiesIn the competitive world of bug bounties, judges play a pivotal role. With both sides (competitors and sponsors) pulling the rope to...
Jul 13, 20235 min readA Case for the DefenseDescribing the various layers of defense a project may use to secure their smart contracts.
Oct 4, 20223 min readThe story of the 0-day crit that wasn'tYesterday I was taking a look at oasisDEX, a trading dApp from the MakerDAO team. With a 10-100K crit bounty on Immunefi and a team with...
Sep 22, 20222 min readDigging into a resurfaced nasty crypto scam 🚩Web3 has secured its place as home of scammers, with a constant supply of new schemes and rotation of old ones. Today we’ll take a look...
Sep 20, 20223 min readLED them in — infiltrating home networks via smart light controllers 🚩This was a research conducted in 2019 of my personal smart lighting system, which led to unexpected findings. IoT devices are becoming...
Sep 20, 202210 min readIoT hacking doctrine 🚩This was published in 2019 to help fellow researchers in their first steps in offensive IoT research. Today we will be presenting a...