AlexSR retweeted
Immunefi Credits are live.
You now receive credits equal to the fees you paid on valid work, backdated to the day fees began.
More than 700 researchers already have theirs. Here’s how it works.
AlexSR retweeted
I hate that security people are the first ones letting AI replace them.
When AI agents and these advanced tools started showing up, we thought security was too critical for any agent to take over. What actually happened is that Web3 security people are so smart and adaptable that we turned it into a race to replace ourselves. Everyone is competing to automate everything and offer cheaper audits, and security itself became the last priority.
I keep seeing people say their AI agent can do it better. You say that because you want to sell your product and your runs. Some of you even publish pricing tiers to cut the protocol’s cost. That trains clients to pay less every time and go looking for the next cheaper offer.
We are diluting ourselves, and I really hate it. We should all be doing valuable work and asking for a fair price, so we can keep doing it properly and bring smart people into this industry. Low prices will only bring low-quality people in.
Is there a simple way to get good quality posts in my X timeline?
Since the protests in France, I'm seeing only that in my timeline, I guess I watched too much of that content.
I would like to go back to seeing people complaining about BB, AI research, engineering... 🥲
Update: just lost $20+$50 due to studio review WRONGLY classifying my issue as OOS (was an instant decision due to a bug in their impact list not matching between real submissions and studio) so I decided to really submit and received an "already known".
Note that the original report happened exactly 17min after my studio submission.
cc @PerseveranceSu5 for the "original" report
My contest ROI:
- Crit (dup): cost $25 / earned $10.07
- Med (unique): cost $25 / earned $252.52
Total spendings: $50
Total earnings: $262.53
Net: +$212.53
Negative reward on a crit is sad, again lower severity paid better. If only valid findings fees were refunded...
The @ensdomains Audit Competition is a wrap!
🏆 Top Winners:
🥇 br0nz3p1ck4x3 - $8,013
🥈 @crypt0n1337 - $6,461
🥉 bugtester - $5,557
🏅 @xylz__1 - $3,194
🏅 I_A_J - $3,032
Congrats to all participants & winners! 🎖
AlexSR retweeted
I'm hiring an intern at @burraSec - paid role.
It's a research role with a lot of writing, close to copywriting. You'll write technical articles, interview bug hunters and top researchers, and break down bugs so anyone can follow them.
You'll work with some of the best researchers in the industry and learn how they think.
To apply, DM me on Telegram (t.me/windhustler):
1. Links to your best writeups, or any of your tweets that went viral.
2. Your availability and why you want this role.
My contest ROI:
- High (dup): cost $25 / earned $1.06
- Low (unique): cost $25 / earned $35.54. Initially auto closed by their AI triager. Project confirmed it on good faith.
- High (dup): cost $25 / earned $17.21. Initially auto closed by their AI triager. Project confirmed it on good faith.
- Critical auto closed: cost $25
Total spendings: $100
Total earnings: $53.81
Net: -$46.19
Happy to secure the space and making donations
The @QuantusNetwork Audit Competition is a wrap!
🏆 Top Winners:
🥇 @therealbytes - $3,286
🥈 @ZealynxSecurity - $2,366
🥉 @Valistheaeth - $2,145
🏅@hnaito_eth - $1,449
🏅@maakayjunior - $1,324
Congrats to all participants & winners! 🎖
AlexSR retweeted
"but affected customers could experience an increase in phishing attempts" fuck no that's NOT the biggest risk. the fucking biggest risk is that criminals come to your house and physically attack you. hear me out folks, there is no fucking reason to ever use your true personal credentials online. use email aliases, fake identities, burner addresses for one-off deliveries, pay with xmr, zec or tornado-cash-funded wallets. all of these companies including governments (see France where tax data was sold) cannot be trusted with your personal data because they're all too incompetent to protect individuals. the only person that can protect you is yourself by acting properly. don't trust anyone with your most important data.
We have some difficult news to share. Unfortunately, one of our shipping providers has experienced a data breach that exposed sensitive order data. This affects new customers in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal who received an order within the 90 days prior to August 8th, 2026.
The data exposed:
- Full names
- Shipping addresses
- Phone numbers
- Email addresses
The incident affects 11,742 customers with full exposure (name, email, phone number, shipping address) and 1,947 customers with partial exposure (name, city, email). The breach is limited due to Trezor’s strict 90-day data storage policy (we were also able to negotiate the same terms with fulfillment partners, who follow the same policy).
All affected customers have been contacted separately by email.
Our systems and devices remain secure, but affected customers could experience an increase in phishing attempts.
NEVER enter your wallet backup on a website or share it with anyone, and only check for updates on official Trezor channels.
We are deeply sorry to the community and those affected.
We are investigating this situation and will post updates on our blog:
trezor.io/blog/news/recent-c…
That’s great, it will force competitors to improve, SRs to have more opportunities and safer ecosystem! Congrqts!
Can’t wait to hear some feedback on it.
AlexSR retweeted
🚨Solidity devs: single command in your AI prompt now gets you to ~80% stateful fuzz-testing coverage.
Introducing Fizz, fully open source. From repo to invariants, tests, runs and coverage report.
Help more people - like & retweet. Stay safe🫡
pashov.com/fizz
More than enough to get started, thanks all!
Over 70 bookmarks tells me a lot of people want to start hunting DLT/Blockchain bugs.
So here's a challenge for us: Find your first High-severity finding before the end of summer. Who's in? 🫡
Glad to see the interest in ProofOfRep!
Now it's your turn. Go submit a report on your experience with bug bounties or audit contests (positive or negative).
proofofrep.xyz
Been wanting this to exist for a while, so I built it.
ProofOfRep, a reputation board for bug bounty programs and contests.
Report your unfair or dishonest experiences, with proof, and I'll manually review everything.
Hope it helps SRs focus on projects that actually take security seriously.
Still early. Let me know if this sucks or if it's useful. All feedback welcome.
proofofrep.xyz/
Been wanting this to exist for a while, so I built it.
ProofOfRep, a reputation board for bug bounty programs and contests.
Report your unfair or dishonest experiences, with proof, and I'll manually review everything.
Hope it helps SRs focus on projects that actually take security seriously.
Still early. Let me know if this sucks or if it's useful. All feedback welcome.
proofofrep.xyz/
AlexSR retweeted
@ParlayItGG is now LIVE!
Prediction markets just got a massive upgrade - native parlays, on-chain settlement.
Stack your predictions. Multiply your payouts.