twinkle retweeted
🇹🇷 3 TÜRK TAKIMI. 3 FORMA. 3 KAZANAN! 🔥
FUT Esports, Eternal Fire ve Aurora'nın Major heyecanını 3 özel forma hediyesiyle kutluyoruz! 🎁
Katılmak çok kolay:
✅ Frag Watch'a ücretsiz kayıt ol.
✅ @FragWatchgg'nin X ve Instagram hesaplarımızı takip et.
✅ Hediye koşullarını tamamla!
👇 HEMEN KATIL
fragwatch.co/giveaway
twinkle retweeted
Ever wanted to build an onchain app but got put off by smart contracts?
On Wed 9 Dec, @bleso_a from @arc is at Encode Hub showing how to go from a prompt to a working app with Arc Studio
No blockchain experience needed - this will be beginner friendly to get you building on chain!
🗓 Wed 9 Dec, 6:30–9:30pm
📍 Encode Hub, Shoreditch
twinkle retweeted
Alex Filippov breaks Ethereum for a living.
- Won the Ethereum Foundation's $2M Pectra competition ($342K), $203K from a single Lighthouse High
- Won the Ethereum Fusaka contest with 2 solo Highs ($155K)
- #3 all-time on Cantina ($542K+)
We asked @alexfilippov314 how he splits the work with AI 👇
twinkle retweeted
$BASE token yayınlayacağını resmi olarak duyurdu.
Şu projelerin yarısı #Airdrop yapsa farklı hayatlar yaşıyor olurduk. $PUMP 4 milyar değerleme ile ICO yaptı ondan sonra hepsi yapmaya başladı.
Bunlar arasında $SEA $BASE $POLY ve $MASK Airdrop yapacak gibi paylaşımlar yaptılar ama sonra bir şekilde bu unutuldu. $SEA bence yapacak $BASE de belki yapar diğerleri yapmayabilir.
Kripto'da bir trend her şeyi değiştiriyor bir proje airdrop yapar token ciddi artarsa mesela bu projelerin de ağzının suyu akmaya başlar ve drop atabilirler.
twinkle retweeted
Curve Finance runs its bug bounty straight from its docs, no platform in between. Top tier pays $250k.
Scope is the Vyper contracts: Stableswap-NG, Tricrypto-NG, crvUSD and lending. Email [email protected], not the old curve.fi.
docs.curve.finance/user/secu…
twinkle retweeted
🐛 Bug Bounty Tip #12/30
Business Logic bugs pay the most and are found by the fewest.
They can't be scanned. You have to think.
Examples:
- Buy an item, apply a coupon, refund → coupon balance remains?
- Transfer $0 to yourself → negative balance?
- Sign up with admin@target[.]com using different casing?
Map the user flows. Then try to break the assumptions. 🧠
#BugBounty #BusinessLogic #Methodology
twinkle retweeted
GIVEAWAY 3/5 🎁 This one's MAX! Win a Xiaomi 18 Pro Max in Velvet Red!
My favorite GenAI App so far? A little water reminder on the Back Display. I could definitely use that.
Now your turn! What GenAI App would you create? Surprise me!
Repost + reply with your idea for a chance to win.
Full entry rules in my first reply.
twinkle retweeted
Up to $1,000,000 for finding critical smart contract bugs!
Safe Foundation is offering bug bounty rewards in USDC on Ethereum mainnet for vulnerabilities that could put funds or protocol security at risk.
💰 Reward tiers:
🔴 Critical: $1,000,000
🟠 Medium: $50,000
🟢 Low: $10,000
Eligible issues include:
• Theft of funds
• Permanent fund lockups
• Vulnerabilities requiring an urgent contract redeployment
Found a vulnerability? Submit your report directly to:
[email protected]
If smart contract security is your field, this is worth checking out.
One thing I have noticed about using crypto is that receiving it, is one thing, but being able to use it for everyday needs is another.
Imagine getting paid in USDT and then having to figure out how to convert it to Naira, send money to your bank account, buy airtime or pay your electricity bill.
It can be a lot of back and forth.
That's why I find what @BinaPay_app is building interesting.
BinaPay brings crypto and everyday payments together, so you can:
• Buy and sell crypto with Naira.
• Convert your crypto to Naira.
• Send money to Nigerian bank accounts.
• Buy airtime and data.
• Pay electricity and cable TV bills.
I like the idea of having these options available in one place instead of jumping between different platforms.
Your crypto. Your bills. One app.
If you use crypto in Nigeria, take a look at what BinaPay offers.
Visit binapay.co/ to explore the platform.
Apple download: apps.apple.com/ng/app/binapa…
Android download:
play.google.com/store/apps/d…
twinkle retweeted
Over the last few months I burned an insane amount of tokens testing every AI auditing technique and prompt I could think of and here are 5 that actually work (from my @summit_defi talk)
twinkle retweeted
you can build an app, deploy it, and handle real users' money without knowing how to find the flaw that could drain it.
that's why bug bounty hunting deserves more attention from developers.
here's what you need to know before starting.
🧵🧵
twinkle retweeted
Building on Lit Protocol? Its bug bounty is in-house and easy to miss.
Scope: Lit Actions runtime, API server, Base contracts, TEE attestation and key release. Medium+ only, human-verified with a runnable PoC. AI-assisted work is welcome.
developer.litprotocol.com/ar…
twinkle retweeted
Hyperliquid's bug bounty runs by email, not on a platform, so it's easy to miss.
Critical up to 1M USDC, High 50k, Medium 10k, paid on Hyperliquid. Extra testnet scope gets announced in Discord and Telegram.
hyperliquid.gitbook.io/hyper…
twinkle retweeted
GIVEAWAY 1/5 🎁 Win a Xiaomi 18 Pro!
After all the excitement yesterday, there's only one way to kick this off. We're starting with THE phone!
The Back Display is full of possibilities, from notifications to everyday essentials.
Now your turn: "I'd use the Back Display for ______."
Repost + reply with your answer! Don’t miss the full entry rules in my first reply.
twinkle retweeted
Calling all @arc-tists! The long-awaited update on the X banner contest is live 👀
community.arc.io/home/blogs/…
twinkle retweeted
A new Guardian Defender contest with @Raacfi is now live, with a $100,000 award pool funded by Guardian!
RAAC is a DeFi lending ecosystem turning real-world assets into on-chain collateral and stablecoin markets.
Details on participating available below! ⤵️
ALT Guardian Defender contest for raac.io. $100,000 award pool. November 10–December 10. defender.guardian.security.
twinkle retweeted
pi network is launching a $200,000 usdt hackathon.
the pi ecosystem summit runs november 17-19, bringing developer announcements, technical demos, ai showcases, and a new opportunity to build on @PiCoreTeam.
here's the schedule:
🧵🧵
twinkle retweeted
Arch elçi alımlarına başlamış, aktif olanlar başvursun bence. Güzel @Arch ödül vereceklerini düşünüyorum. Bol şans herkese.
yorumlarda başvuru linki paylaşıyorum.
market slow as a creator? i have an opportunity for you
we are opening our application to be an @Arch ambassador.
monthly cash prize pools, points for @Arch_Prime, and much more.
closing in 72 hours, come join us!
apply here: forms.gle/yN6WpMFBzTtmAeUG7
twinkle retweeted
🐛 Bug Bounty Writeup
• How Bug Bounty Programs Work: A Beginner’s Guide: cybrox.medium.com/how-bug-bo…
• The JWT Bugs That Survive ‘We Use OAuth, So We’re Secure’: medium.com/@dhirenkumar/the-…
• The Permission the Consent Screen Never Mentioned: OAuth Scope Escalation Through Token Refresh: medium.com/@t4nv1/the-permis…
• eWPTX Exam Review — What Actually Matters: medium.com/@mo.muwafak2001/e…
• When OAuth Works Correctly and Security Doesn’t: A Bug in OAuth Account Linking: medium.com/@0xnexus0xfault0x…
• Information Disclosure: The Bug Hunter’s Complete Guide: osintteam.blog/information-d…
• Why Rate Limiting Fails Against Distributed Attacks — and How to Build One That Holds: medium.com/@vigneshkumaroffs…
• SSTI2 ~ CyLab Security Academy Write-up | Server-Side Template Injection: medium.com/@affanhaxor/ssti2…
• Group Injection in aws-iam-authenticator: RBAC Privilege Escalation via {{SessionName}}: medium.com/@sachinpatilsp/gr…
• From P4 to P1: Day 14 — Privilege Escalation: Finding Horizontal and Vertical Access Control…: medium.com/@cyb3rD1vvya/from…
