@LucidBitLabs

Cybersecurity research services.

lucidbitlabs.com
Joined April 2025
  • Tweets10
  • Following1
  • Followers198
Last week we disclosed CVE-2026-20971: a Samsung KNOX kernel UAF affecting Galaxy S9-S25 devices. It was later covered by SecurityWeek and Security Affairs. Technical writeup: lucidbitlabs.com/blog/when-d…

When Defenses Become Attack Surface: CVE-2026-20971, a Samsung Kernel UAF

LucidBit Labs research shows how Samsung's FIVE integrity subsystem exposed an app-reachable kernel use-after-free with multiple exploit-relevant primitives.

lucidbitlabs.com
1
4
203
#Samsung #KNOX #Kernel UAF Exposes Millions of #Galaxy Devices securityaffairs.com/194090/s… #securityaffairs #hacking @LucidBitLabs

Samsung KNOX Kernel UAF Exposes Millions of Galaxy Devices

Samsung’s KNOX flaw (CVE-2026-20971) is a kernel UAF in PROCA/FIVE that can enable corruption via a race; Samsung patched it in Jan 2026.

securityaffairs.com
2
4
606
LucidBitLabs retweeted
Lior Keshet
@LiorKeshJun 23
Samsung fixed the issue in the January 2026 Android security update. Read here: lucidbitlabs.com/blog/when-d…

When Defenses Become Attack Surface: CVE-2026-20971, a Samsung Kernel UAF

LucidBit Labs research shows how Samsung's FIVE integrity subsystem exposed an app-reachable kernel use-after-free with multiple exploit-relevant primitives.

lucidbitlabs.com
2
10
1,310
LucidBitLabs retweeted
Lior Keshet
@LiorKeshApr 9
Our team participates in public bug bounty programs to sharpen our vulnerability research skills. We recently looked at Firedancer, a blockchain validator client, and found a remotely triggerable vulnerability. lucidbitlabs.com/blog/fireda…

Remote Unauthenticated Memory Safety Flaw in Firedancer's Packet Path

LucidBit Labs discovered a remote unauthenticated memory safety flaw in Firedancer's XDP packet path, recovered a realistic GRE delivery path, and earned a $100,000 Immunefi bounty after demonstrat...

lucidbitlabs.com
4
6
338
LucidBitLabs retweeted
Immunefi
@immunefiApr 1
Congrats to security researcher Liork (@LucidBitLabs) for earning $50,000 from a blockchain/dlt High vulnerability. They're now ranked 83rd on the all-time leaderboard. Pledge IMU behind them so that when they find new bugs and increase their rank, you both get IMU rewards. immunefi.com/pledge/liork/
7
19
197
7,372
LucidBitLabs retweeted
Lior Keshet
@LiorKeshMar 3
1/ Our team at @LucidBitLabs recently audited a crypto wallet app. We found 2 impactful vulnerabilities 👇
1
2
4
633
We audited a mobile crypto wallet and found impactful vulnerabilities. Check out the research here - lucidbitlabs.com/posts/2026-…

Strong Cryptography, Weak Assumptions: Breaking Trust in Mobile Crypto Wallets

LucidBit Labs vulnerability research reveals how application-level failures in a mobile crypto wallet bypassed strong cryptography, exposing users to real financial risk.

lucidbitlabs.com
1
2
7
586
LucidBitLabs retweeted
Immunefi
@immunefi8 Dec 2025
Incredible. Security researcher Liork (@LucidBitLabs) just earned $100,000 for their first ever report on Immunefi. Oh, and this report earned Liork some pretty big Hunt Points, too.
4
11
2
231
10,715
Check out how we bypassed root detection and other protections for high security Android apps
Lior Keshet
@LiorKesh17 Jul 2025
We broke commercial root detection in Android apps 🔓📲 We targeted sensitive apps - finance, security, government - which use commercial protections. We got them running on rooted devices. That gave us full control to modify app behavior however we wanted. 👇
2
5
1,521
LucidBitLabs retweeted
Lior Keshet
@LiorKesh16 Jul 2025
At @LucidBitLabs, we broke commercial root detection in apps with top-tier app protections in place (RASP). Full write up - lucidbitlabs.com/blog/commer…

Bypassing Commercial RASP and Root Detection - A Reality Check

We bypassed leading Android root-detection SDKs and show what that means for banking, government-ID and anti-fraud apps running on rooted devices.

lucidbitlabs.com
5
7
1,310
Load more