@QED_Audit

Concluding web3 security.

 0xcafe
qedaudit.io
Joined December 2025
  • Tweets104
  • Following6
  • Followers1.1K
31Media
Replying to @QED_Audit
@QED_Audit found CVE-2026-19174, an integer overflow in V8 that gives you arbitrary code execution in Chrome. The bug is one line of constant arithmetic. It survived 3.5 years of fuzzing, manual audit, and LLM-driven review. (1/n)
3
15
2
111
27,165
We didn't make it into this year's Pwn2Own, but we still pwned five targets. Hopefully we'll be able to publish the vulnerabilities soon, along with walkthroughs of how we broke each one. Had a lot of fun collaborating with @qvipinb at @vert3x_io 🫡
3
8
4
84
8,454
Also from @vert3x_io, go follow them! xitter.cf/vert3x_io/status/21073…
vert3x
@vert3x_ioOct 6
Thank you for collaborating w/ us! We’re all pretty let down that we didn’t get in :( @QED_Audit x @vert3x_io will be responsibly disclosing all vulnerabilities found, and all PoCs will be dropped soon™. Be on the lookout for some other cool hardware disclosures 👀
Music Assistant -> HAOS Root chain

ALT Music Assistant -> HAOS Root chain

Phillips Hue Bridge Pro RCE + SBX

ALT Phillips Hue Bridge Pro RCE + SBX

1
1
5
853
*6 targets 😅
299
*6 targets
QED Audit
@QED_AuditOct 6
We didn't make it into this year's Pwn2Own, but we still pwned five targets. Hopefully we'll be able to publish the vulnerabilities soon, along with walkthroughs of how we broke each one. Had a lot of fun collaborating with @qvipinb at @vert3x_io 🫡
4
604
(And to @asymmetric_re, @QED_Audit, and @zksecurityXYZ for helping to keep it all safe 😅)
5
23
1,632
1/ We found a full collision for the Poseidon1 Collision Prize instance and submitted it on July 31. Two different messages, identical 16-word output after all 28 rounds, verified on the Initiative's official implementation. The technical breakdown and full story ⬇️
1
12
3
93
9,657
more replies
6/ LLMs are accelerating cryptography on both sides. Claude found a new HAWK attack, McEliece is under pressure after 50 years, and Poseidon saw a wave of new cryptanalysis in weeks. On the other side, AI autoresearch made SHA/BLAKE cheap to prove(snark.fast). Ethereum L1 is moving from Poseidon to SHA/BLAKE.

Flock Challenge — SNARK.fast

Make post-quantum Ethereum faster and follow every improvement on the live optimization dashboard.

yukon.org
1
2
551
7/ With LLMs in the loop, cryptosystems will be contested harder than ever. Only the safe, efficient ones survive. Matrix M, both messages, verifier: github.com/ainta/poseidon1-c… ePrint: eprint.iacr.org/2026/1760 Blog: qedaudit.io/blog/poseidon-co…
1
1
5
1,396
QED Audit retweeted
Xion@0x10nSep 6
During my time at @QED_Audit I circled back and took another quick look at browser/JSE vulnerability research. AI agents flying high, seemingly finding & exploiting bugs everywhere, and there's this: a **constant integer overflow** in V8, alive for over 3.5 years. (1/5)
QED Audit
@QED_AuditSep 6
Replying to @QED_Audit
@QED_Audit found CVE-2026-19174, an integer overflow in V8 that gives you arbitrary code execution in Chrome. The bug is one line of constant arithmetic. It survived 3.5 years of fuzzing, manual audit, and LLM-driven review. (1/n)
2
25
2
147
17,310
This one was found and exploited end-to-end with Claude Opus 5 under moderate human supervision of @0x10n, a seasoned Chrome security researcher and the author of ExploitBench. (14/n)
1
692
Full writeup, including the exploit and the upstream fix: qedaudit.io/blog/brilliantly… (15/n)

qedaudit.io

QED found CVE-2026-19174, an integer overflow vulnerability in V8 that allows arbitrary code execution without a heap sandbox bypass.

qedaudit.io
6
20
1,853
Load more