zpan

@vidrepar @shaflow01

Duplicate detection got a sibling today. Known issue matching is live in Studio Review. Programs keep a list of issues they already know about. Match one and your report gets closed like a dupe. So the review now checks that list before you submit. Tag your role model researcher in replies and I'll get you both access.

@ACai_sec @HackenProof 完善一下Profile和KYC应该就够了

@0zpan @HackenProof hackenproof的新号积分根本不够现在项目要求的门槛🫠连提交的资格都没有

Yeay, I was awarded for my three valid submissions on @HackenProof after three months with my AI system. Keep hunting! hackenproof.com #hackenproofed #bugbounty

@ACai_sec @HackenProof 是你带我啊 哥

@0zpan @HackenProof 带带弟弟好吗🥹

My current favorite model is GPT-5.5, before GPT-5.6 came out. @thsottiaux

GPT-5.6 Sol, along with Terra and Luna, will launch publicly this Thursday. We’re expanding preview access globally now.

@VittoStack I can't send DM.

4 days ago we launched Jailbroken, a PRIVATE Discord community to learn AI red teaming and safety. Since then: - Over 250 security researchers joined - Top resources have been collected - People shared countless techniques and discoveries Today, we've secured over 100B in FREE AI tokens for all the members. If you want to join, drop a comment.

@snufflesrea I completely agree.

Bug bounty reality check: Found an issue where fees could still be collected after permission was revoked. Submitted it, but the finding was rejected. Frustrating? Yes. Giving up? No. Every invalid finding is another lesson. Back to the code. 🛡️

4 Dup in one Day

@ret2basic 看看JB

JB被攻击， 损失50k😭

Been wanting this to exist for a while, so I built it. ProofOfRep, a reputation board for bug bounty programs and contests. Report your unfair or dishonest experiences, with proof, and I'll manually review everything. Hope it helps SRs focus on projects that actually take security seriously. Still early. Let me know if this sucks or if it's useful. All feedback welcome. proofofrep.xyz

3 months building an AI-powered vuln-hunting system taught me: AI doesn’t replace auditing — it turns intuition into an engineering loop. 1H3M in bug bounty so far. Keep moving forward.

@WhiteHatMage It's time to do something.

Last time I checked, hardly any ZK projects had bounty programs. Now’s a good time to set one up.

@WhiteHatMage However, it's clear that you can't request a review of a duplicate, low-severity report.

I also have another theory about duplicates: some projects and platforms abusing nonsense slop submissions. You disclose an e2e-proven exploit, but it gets marked as a duplicate because of the "root cause". The slop report contains the vulnerable lines but no actual proof or has invalid claims. With enough slop, you cover all the lines where a reasonable bug could exist. Then the project reopens the invalid slop submission, pays it as Low, and avoids paying the actual Critical. That’s my worst nightmare. That shouldn’t happen ever.

@0xaudron @HackenProof Diff program

Everyone hitting $10k bounty on @HackenProof , is it mostly on Hyperbridge or diff program ? My feed is kinda full with $10k bounty post.

Thank you Code4rena dailywarden.com

@ret2basic @ACai_sec 可以带着我一起讨口子么

@ACai_sec 我计划是30天没活就转行 现在还差17天 我也在看新领域还没想到特别好的

Bye code4rena🥹 What’s next web3 SRs, what do you plan to do next? Any new field that has opportunities like code4rena back in 2021?