This week our team found high-sev vulnerabilities in ZeroDev's Bastion session wallet. Replaying a signature refills a factory budget that was already spent. Full report: hackerbane.com/reports/hacke…

This week our team reviewed @Shipfox_HQ. We found four vulnerabilities, one critical. Communication with the team was excellent, and all findings were resolved within 48 hours. Full report: hackerbane.com/reports/hacke…

We found 2 Critical vulnerabilities in a live token protocol this week. The findings have not been resolved. 100% of the protocol's live TVL is currently at risk, and the team have not yet responded to our report.

Our researcher found 6 high-severity vulnerabilities found in a Web3 bridging platform. Multiple attempts to contact the team via DMs, email and Discord. Still no response. If you're handling user funds, ignoring security disclosures is unacceptable.

This week our team audited oksolc, the Zig implementation of the Solidity compiler. Writing a secure and correct compiler code is one of the most technically challenging areas in Computer Science. full report: hackerbane.com/reports/hacke…

Our lead security researcher has contacted @OpenAI about a vulnerability in ChatGPT, allowing full nudity imagery through the chat UI. We've notified OpenAI and are withholding reproduction details while the issue is assessed. More to follow

HACK: Ledger asked CryptoBilis to pause sales and shipments of their hardware wallet. If you bought a device there in the last 90 days, do not set it up. If you already did, move the funds to a new device with a new seed immediately.

X7 Finance got hacked this morning for about 6.78 ETH. A bug in the rewards payout counted the same ETH more than once and let someone withdraw it again. etherscan.io/tx/0xc98056d6ab…

This week our team collaborated with @forevermoney_ai on auditing their bridge contracts. Code quality was very high, and the team's communication and remediation was excellent. No medium or high findings were documented. Full report: hackerbane.com/reports/hb-ar…

We are hiring 2 top 1% Solidity Engineers to join our team. - Fully remote - Up to $250k + equity + profit share bonus Top 1% candidates need only apply Bonus if you have found high/critical vulnerabilities on established projects Send your CV to [email protected]

This week our team found a high-sev vulnerability in a Bitcoin Improvement Proposal. The change can mark a payment as signed when the signature was never checked. Full report: hackerbane.com/reports/hacke…

Excited to announce we are partnering with @HackenProof and have been included in their list of preferred auditors

One of our engineers found a high-severity vulnerability in NVIDIA's LLM scanner (garak). A detector missed when fake/malicious python packages were imported into the app. NVIDIA has used our solution to patch the bug. Full writeup of the issue below hackerbane.com/reports/hacke…