cyber (@cyberthirst) header
cyber (@cyberthirst) profile picture

looking for venus on the ocean floor

Joined January 2016
Photo by cyber (@cyberthirst)Photo by cyber (@cyberthirst)Photo by cyber (@cyberthirst)Photo by cyber (@cyberthirst)Photo by cyber (@cyberthirst)Photo by cyber (@cyberthirst)Photo by cyber (@cyberthirst)Photo by cyber (@cyberthirst)Photo by cyber (@cyberthirst)Photo by cyber (@cyberthirst)
found some nice bugs, and jumped to the 4th place on the ethereum el bounty leaderboard!
1
1
28
636
soon top 3 on the ethereum el leaderboard 😎
1
6
318
after going over the EL updates for the glamsterdam hf, @Nethermind seems have adapted the best in the agentic era without compromising on correctness. other teams are moving at half the speed. @ErigonEth 's doing well too, but the codebase seems more buggy
3
156
the new anthropic CVP for defenders (defense access) is much more benevolent than the oai equivalent (daybreak blue) whilest supporting the SOTA (opus 5.5) highly recommend for you to go get verified!
1
168
mythos 5.1 has been underwhelming so far. hopefully, with the fable 5.5 release, they'll also rollout the new mythos model
1
79
what's your daily driver model for light cyber tasks (triage, pocs, modeling, etc)? i really dislike gpt6-sol, and still run gpt5.6-sol, anything better out there? astra, fable, opus5.5 all get flagged pretty fast even with the cyber programs
1
213
sometimes i loop astra/fable under supervision of gpt5.6, and have it modify the prompts to satisfy the classifiers. it works, but bad UX
63
submit report to @immunefi closed by immunefi triage bug gets fixed 🥲
7
44
4,371
i tried to demonstrate the "confirmation of an invalid transaction". the issue was about a vm incorrectly executing the prescribed semantics. i assume, my report got interpreted as a valid tx introducing invalid state change, and got closed.
1
2
588
the impact made sense given the tx should have been rolled-back (but included in a block) this is not meant as a dunk on immunefi, rather a as a reminder that a working poc isn't the final step 😜
2
538
earlier this year it was easy to find bounty-grade bugs by just chatting with your lmm buddy with each model release there's a short abitrage window, but overall the model capabilty is commoditizing you can either brute-force by 10x-ing your token usage to get only a slight advantage, or unfortunately, use the brain again with a harness you can transcend the model. the models are great tacticians, but weak strategists. a codebase is an exponential maze, and you will get lost making locally optimal decisions while relying on a lossy context
1
4
391
respect
Confession time: @ControlZ_1337 didn't manually review a single line of code in this competition. Everything was done through custom AI workflows that we built and orchestrated using our own platform: open·kritt. And as the name suggests, we're open sourcing it. @Kritt_AI We're planning to release it this week (hopefully), so if you don't want to miss it, go follow @Kritt_AI for updates. Our hope is that open·kritt helps more researchers build powerful AI-assisted security workflows and ultimately makes the Web3 ecosystem more secure :)
307
can't wait for the siri magic in gpt 6.0
🚨OPENAI ALLEGEDLY STOLE APPLE’S ENTIRE PLAYBOOK “Hundreds of billions of dollars, decades of work” Hardware Engineering - circuit designs, component architecture, power management - unreleased products guarded by internal codenames - AI/ML integration for hardware - EMI engineering + testing methods Manufacturing Secrets - proprietary processes + custom machinery - equipment Apple builds and installs IN supplier factories - proprietary metal alloys + finishing techniques - DFM (Design for Manufacturability) expertise Component Technologies - power chips, battery systems, displays, acoustics, touch - identities of specialized sub-suppliers - exact specs Apple demands from components Testing Data - failure analyses, lifecycle simulations - “negative know-how” — everything Apple tried that DIDN’T work Supply Chain - supplier contracts, allocation strategies - global logistics coordination - systems-level integration ALL GONE 💀
3
496
basic bug and a clever exploit. check your return values! i partially blame this on the evm, as the codesize limit and high gas prices encouraged similar practices unfortunately, gas golfing patterns might still be deeply entrenched in the training data, and agents will still use them even as evm evolves, and more defensive code could and should be written
1
4
1,057
very logical given the upcoming 5.6 release too bad i'm very illogical and blasted my limits sipping on my morning coffee
We're extending access to Claude Fable 5 on all paid plans through July 12.
1
245
currently 7th on the ethereum execution layer bug bounty
4
82
3,640
conveniently put mythos and fable into the same column.. from quick testing, fable scores as high as 0% on cyber
Replying to @claudeai
Fable 5 is state-of-the-art on nearly all tested benchmarks, with exceptional performance in software engineering, knowledge work, scientific research, and vision. The longer and more complex the task, the larger Fable 5’s lead over our other models.
246
found a nice high in the ethereum el bpp
6
197
armed man robs a bank in broad daylight, tale as old as time hackers meet the target in person to discuss quant strategy .. developers in shambles
3
260