The crafts of security auditing and bounty hunting are deeply interwoven. Very often a novel exploit idea discovered during auditing is...

In the competitive world of bug bounties, judges play a pivotal role. With both sides (competitors and sponsors) pulling the rope to...

Describing the various layers of defense a project may use to secure their smart contracts.

Yesterday I was taking a look at oasisDEX, a trading dApp from the MakerDAO team. With a 10-100K crit bounty on Immunefi and a team with...

Web3 has secured its place as home of scammers, with a constant supply of new schemes and rotation of old ones. Today we’ll take a look...

This was a research conducted in 2019 of my personal smart lighting system, which led to unexpected findings. IoT devices are becoming...

This was published in 2019 to help fellow researchers in their first steps in offensive IoT research. Today we will be presenting a...