Is there a simple way to get good quality posts in my X timeline?
Since the protests in France, I'm seeing only that in my timeline, I guess I watched too much of that content.
I would like to go back to seeing people complaining about BB, AI research, engineering... 🥲
Update: just lost $20+$50 due to studio review WRONGLY classifying my issue as OOS (was an instant decision due to a bug in their impact list not matching between real submissions and studio) so I decided to really submit and received an "already known".
Note that the original report happened exactly 17min after my studio submission.
cc @PerseveranceSu5 for the "original" report
My contest ROI:
- Crit (dup): cost $25 / earned $10.07
- Med (unique): cost $25 / earned $252.52
Total spendings: $50
Total earnings: $262.53
Net: +$212.53
Negative reward on a crit is sad, again lower severity paid better. If only valid findings fees were refunded...
The @ensdomains Audit Competition is a wrap!
🏆 Top Winners:
🥇 br0nz3p1ck4x3 - $8,013
🥈 @crypt0n1337 - $6,461
🥉 bugtester - $5,557
🏅 @xylz__1 - $3,194
🏅 I_A_J - $3,032
Congrats to all participants & winners! 🎖
AlexSR retweeted
I'm hiring an intern at @burraSec - paid role.
It's a research role with a lot of writing, close to copywriting. You'll write technical articles, interview bug hunters and top researchers, and break down bugs so anyone can follow them.
You'll work with some of the best researchers in the industry and learn how they think.
To apply, DM me on Telegram (t.me/windhustler):
1. Links to your best writeups, or any of your tweets that went viral.
2. Your availability and why you want this role.
My contest ROI:
- High (dup): cost $25 / earned $1.06
- Low (unique): cost $25 / earned $35.54. Initially auto closed by their AI triager. Project confirmed it on good faith.
- High (dup): cost $25 / earned $17.21. Initially auto closed by their AI triager. Project confirmed it on good faith.
- Critical auto closed: cost $25
Total spendings: $100
Total earnings: $53.81
Net: -$46.19
Happy to secure the space and making donations
The @QuantusNetwork Audit Competition is a wrap!
🏆 Top Winners:
🥇 @therealbytes - $3,286
🥈 @ZealynxSecurity - $2,366
🥉 @Valistheaeth - $2,145
🏅@hnaito_eth - $1,449
🏅@maakayjunior - $1,324
Congrats to all participants & winners! 🎖
AlexSR retweeted
"but affected customers could experience an increase in phishing attempts" fuck no that's NOT the biggest risk. the fucking biggest risk is that criminals come to your house and physically attack you. hear me out folks, there is no fucking reason to ever use your true personal credentials online. use email aliases, fake identities, burner addresses for one-off deliveries, pay with xmr, zec or tornado-cash-funded wallets. all of these companies including governments (see France where tax data was sold) cannot be trusted with your personal data because they're all too incompetent to protect individuals. the only person that can protect you is yourself by acting properly. don't trust anyone with your most important data.
We have some difficult news to share. Unfortunately, one of our shipping providers has experienced a data breach that exposed sensitive order data. This affects new customers in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal who received an order within the 90 days prior to August 8th, 2026.
The data exposed:
- Full names
- Shipping addresses
- Phone numbers
- Email addresses
The incident affects 11,742 customers with full exposure (name, email, phone number, shipping address) and 1,947 customers with partial exposure (name, city, email). The breach is limited due to Trezor’s strict 90-day data storage policy (we were also able to negotiate the same terms with fulfillment partners, who follow the same policy).
All affected customers have been contacted separately by email.
Our systems and devices remain secure, but affected customers could experience an increase in phishing attempts.
NEVER enter your wallet backup on a website or share it with anyone, and only check for updates on official Trezor channels.
We are deeply sorry to the community and those affected.
We are investigating this situation and will post updates on our blog:
trezor.io/blog/news/recent-c…
That’s great, it will force competitors to improve, SRs to have more opportunities and safer ecosystem! Congrqts!
Can’t wait to hear some feedback on it.
AlexSR retweeted
🚨Solidity devs: single command in your AI prompt now gets you to ~80% stateful fuzz-testing coverage.
Introducing Fizz, fully open source. From repo to invariants, tests, runs and coverage report.
Help more people - like & retweet. Stay safe🫡
pashov.com/fizz
More than enough to get started, thanks all!
Over 70 bookmarks tells me a lot of people want to start hunting DLT/Blockchain bugs.
So here's a challenge for us: Find your first High-severity finding before the end of summer. Who's in? 🫡
Glad to see the interest in ProofOfRep!
Now it's your turn. Go submit a report on your experience with bug bounties or audit contests (positive or negative).
proofofrep.xyz
Been wanting this to exist for a while, so I built it.
ProofOfRep, a reputation board for bug bounty programs and contests.
Report your unfair or dishonest experiences, with proof, and I'll manually review everything.
Hope it helps SRs focus on projects that actually take security seriously.
Still early. Let me know if this sucks or if it's useful. All feedback welcome.
proofofrep.xyz/
Been wanting this to exist for a while, so I built it.
ProofOfRep, a reputation board for bug bounty programs and contests.
Report your unfair or dishonest experiences, with proof, and I'll manually review everything.
Hope it helps SRs focus on projects that actually take security seriously.
Still early. Let me know if this sucks or if it's useful. All feedback welcome.
proofofrep.xyz/
AlexSR retweeted
@ParlayItGG is now LIVE!
Prediction markets just got a massive upgrade - native parlays, on-chain settlement.
Stack your predictions. Multiply your payouts.
AlexSR retweeted
Turns out ARB can just send away funds from your wallet
The Arbitrum Security Council has taken emergency action to freeze the 30,766 ETH being held in the address on Arbitrum One that is connected to the KelpDAO exploit. The Security Council acted with input from law enforcement as to the exploiter’s identity, and, at all times, weighed its commitment to the security and integrity of the Arbitrum community without impacting any Arbitrum users or applications.
After significant technical diligence and deliberation, the Security Council identified and executed a technical approach to move funds to safety without affecting any other chain state or Arbitrum users.
As of April 20 11:26pm ET the funds have been successfully transferred to an intermediary frozen wallet. They are no longer accessible to the address that originally held the funds, and can only be moved by further action by Arbitrum governance, which will be coordinated with relevant parties.