nop

@wunderwuzzi23 Wow, congrat bro 😼

Whoa! Big bounty! 🎉

@GodLDeViL07 @intigriti Congrat bro! 🔥

My first bounty on @intigriti 🥳

11 hours of reverse engineering, exploit dev, rop chains, custom shellcode, code caves. In 11 minutes.

@infsec_io @cantinasecurity Congrat bro

The first week of bug bounty hunting in the cantina, big win. cantina.xyz/u/InfiniteSec I'm a bit curious why there isn't a leaderboard for bug bounties, only for auditing competitions.😆 @cantinasecurity

@0xazanul Wwow, congrat bro

the fuzzing continues. recently received a $500 reward for a report that came out of techniques i've been learning and documenting along the way. still experimenting. still learning. #fuzzing #bugbounty #TogetherWeHitHarder

@medusa_0xf @Hacker0x01 Congrat bro!

Just got rewarded with $3500 on @Hacker0x01 🐍✨

@dp7954 Congrat man

At least, I got feedback...

@only01Essential congrat bro!

$3,000 bounty for another chain-halt bug. If exploited, any normal user could have completely halted the chain. Recovery would have required a patch and coordinated network upgrade.

@Kle0z congrat bro

This was a 10k USD simple but critical time-based sqli bug i found a while ago, with the help of bbradar.io notifications. > New target went live -> Instant Discord notification > Basic recon > Ghauri against api endpoints > Full db dump Sometimes its as simple as being first.

@only01Essential @HackenProof Congrat bro

Yeay, I was awarded for a valid submission on @HackenProof #hackenproofed #bugbounty

@ihj @Hacker0x01 Congrat!!

Yay, I was awarded a $20,000 bounty on @Hacker0x01! hackerone.com/jjjjjjjjjjjjjj… #TogetherWeHitHarder

@cantinasecurity @rileyholterhus Goat bro

$500,000 to @rileyholterhus through Cantina Bounties. 🪐 The researchers who consistently find the bugs that matter don't chase volume. They follow programs where scope is tight, triage is fast, and rewards match actual impact. Well done, Riley!

@habib0x0 Congrat bro!

Hacking #Agents at Cantina Made my first $1000 bounty today

@banditx0x congrat

Trying my AI vulnerability researcher 🤖 in the wild. 0 LOC read by a human.

@akokoi1 thank for the feedback. Damn it, if that’s true…

浪费了$20帮你们测试了2个席位的ChatGPT team。 结论：不要开！被反撸了，单个账号Codex额度不到Plus会员的四分之一，基本不可用。

@neostify Good

@wgujjer11 Congrats

Finding Critical Bugs in Adobe Experience Manager (AEM) muhammadwaseem29.tech/blog/aem

@ngosytuanbug congrats dude

I just gave Claude Code a rooted Android phone… It autonomously reverse-engineered Subway Surfers, hooked the coin logic, bypassed the anti-cheat, and gave itself UNLIMITED coins in ONE session.

Claude Code with agent, autonomously hacked Subway Surfers, and printed millions of coins. A rooted Android phone... and it turned Subway Surfers into a money printer. From 4 coins to 2,000,000+ coins in two runs. autonomous loop, analyzed, and pwned a Unity game in one session, intercepts traffic, bypasses SSL pinning, and even reverse-engineers offline games. The full Setup: Rooted emulator via rootAVD + Magisk + AlwaysTrustUserCerts. Toolchain: UI Automator, mitmproxy traffic capture, Frida bypass scripts, APK static analysis. The agent loops by itself: - Dump screen & UI elements - Tap/swipe via ADB - Analyze traffic or binary - Decide next move without a human. It played the game, reverse-engineered the Unity IL2CPP binary, hooked Frida on SafeInt anti-cheat, and silently multiplied currency. Subway Surfers (com.kiloo.subwaysurf) Almost zero network traffic to agent pivots. Detects Unity IL2CPP parses global-metadata.dat Finds WalletModel, RunSessionData, AddCoins, and SetCurrencySilently. Then hooks with Frida and multiplies rewards ×100+. Result: 4 coins to over 2 million. SafeInt anti-cheat? Bypassed Stealth mode This is the future of mobile pentesting? credit via: @skshadan_ - workers.io/blog/autonomou…