ControlZ

724 posts

ControlZ banner
ControlZ

ControlZ

@ControlZ_1337

@immunefi Elite All Star | Security Researcher @_blockian | #22 all-time whitehat @immunefi | #7 all-time whitehat @hackenproof

Katılım Mart 2023
234 Takip Edilen2K Takipçiler
Sabitlenmiş Tweet
ControlZ
ControlZ@ControlZ_1337·
Another milestone on our @immunefi journey! But I’m not settling — most whitehats at this level have already hit $1M. We still have work to do to earn this spot truly, and we will get there. Mark my words 🫡
Blockian@_blockian

Just reached rank 30 on @immunefi all-time! This also marks the halfway point on the road to $1 Million! ▓▓▓▓▓░░░░░ $527k / $1M

English
7
3
72
11.2K
Rahul Saxena
Rahul Saxena@saxenism·
With AI aggressively entering everyday lives, novel attack vectors come up every day. For example, if a black hat, well versed in the dark arts of web3, was behind this, I'd bet they'd be very interested in the LLM prompts of @WhiteHatMage, @0xriptide, @ControlZ_1337 etc
SecurityWeek@SecurityWeek

Popular Chrome Extensions Caught Stealing AI Chats - Two malicious Chrome extensions were caught exfiltrating browser data and users’ conversations with ChatGPT and DeepSeek - securityweek.com/chrome-extensi…

English
2
0
16
1.9K
ControlZ
ControlZ@ControlZ_1337·
@Ehsan1579 Same guess here. Those are the only projects that offer max bounty of $3M
English
1
0
11
1.6K
Ehsan
Ehsan@Ehsan1579·
My best guess for the 3 mill bug is either Ethena or Chainlink.
English
10
1
97
7.1K
ControlZ
ControlZ@ControlZ_1337·
@ma1fan Wait until ily2 posts it was done with AI
English
3
0
40
1.1K
Immunefi
Immunefi@immunefi·
Security researcher ily2 has just earned a staggering $3,000,000 from submitting a critical smart contract bug via Immunefi. That's the largest single payout in web3 security in recent memory. In total, he's submitted 3 reports. All 3 were paid. 100% accuracy. His leaderboard update is coming soon, but you can pledge IMU to him now and earn when he finds the next one: immunefi.com/pledge/ily2
Immunefi tweet media
English
197
157
1.2K
337.7K
ControlZ
ControlZ@ControlZ_1337·
@aliveevie_ It’s not about the AI, it’s about the report and bug, is the bug real? Does the PoC works?
English
1
0
2
39
ControlZ
ControlZ@ControlZ_1337·
Oh wow! I’m truly honored to see that. Thank you so much for the support and belief!
Immunefi@immunefi

The @_blockian team just received a 30,000 IMU pledge after winning a $40,000 bounty. More wins, more IMU pledged, more security.

English
3
8
49
4.4K
ControlZ
ControlZ@ControlZ_1337·
This is something nice to come back to after vacation. The AI agent is performing more and more consistently, and I think that’s what really defines a strong security researcher. Not just luck (well, maybe a little), but consistent ability to find real bugs. That’s why the AI is called kritt.ai - only Criticals. All AI. No luck (some luck)
Immunefi@immunefi

The dynamic duo @_blockian is at it again. They just found a blockchain/dlt crit, earning them $40,000. Their AI tool clearly works. 2026 is going to be a race: who can build the best AI tool and prove it by posting wins on the Immunefi leaderboard? In the meantime, you can earn IMU rewards whenever Blockian finds a bug by pledging IMU here: immunefi.com/pledge/Blockia…

English
8
1
77
6.1K
Immunefi
Immunefi@immunefi·
The dynamic duo @_blockian is at it again. They just found a blockchain/dlt crit, earning them $40,000. Their AI tool clearly works. 2026 is going to be a race: who can build the best AI tool and prove it by posting wins on the Immunefi leaderboard? In the meantime, you can earn IMU rewards whenever Blockian finds a bug by pledging IMU here: immunefi.com/pledge/Blockia…
Immunefi tweet media
English
13
18
159
18.4K
ControlZ
ControlZ@ControlZ_1337·
@thepantherplus @immunefi @_blockian Indeed, I'm against reporting AI reports blindy. The AI still makes mistakes and it's still not perfect so currently human intervention is required.
English
0
0
5
203
ControlZ
ControlZ@ControlZ_1337·
Nice job! I guess you guys currently have the second-best ranked AI agent out there 😉 (After @_blockian aka me, currently ranked #1 in the last 90 days - all thanks to AI)
Octane Security@octane_security

We're thrilled to finally reveal: oct0pwn is Octane 10% of the year has passed and we're still at the top of the 2026 @immunefi leaderboard. And #4 in the last 90 days behind three truly elite auditors. Is this the first time an AI has held top spot?

English
3
16
123
8.7K
Dacian
Dacian@DevDacian·
30% post-hack reward being offered to criminal blackhats if they return 70% of their stolen illicit gains! Hope it works out for this protocol & users can be made whole, but sucks to see blackhats being treated much better than whitehats. Will this be fixed in 2026?
Gyroscope@GyroStable

⚠️ Message to who executed the GYD bridge security incident To 0x7DD4075A6eAe9f18309F112364f0394C2DfA8102: This is Gyroscope governance. We propose a resolution to the GYD smart contract incident. You can return 200 ETH that you hold from this incident. Gyroscope is then in a position to consider the remaining over 100 ETH as a fixed whitehat settlement credit. This generous of a settlement is possible because it gives the protocol a chance of making users whole by canceling GYD’s system surplus. If you take this offer, Gyroscope will cease investigations and consider you as a whitehat who performed an emergency recovery of funds and made users whole. It’s a win for all. You will be taking a big everlasting risk if you take all of the funds, which isn’t even that much in total. With this offer, for the same order of magnitude of reward, your risk would be reduced massively and users would be made whole. If the funds are not returned, Gyroscope will alternatively offer the same deal to the public for anyone for information that leads to prosecution and full recovery of funds. Security researchers have already found significant leads that could aid in this direction. We believe it doesn’t have to go that way though, and we believe you can be a whitehat. To accept this settlement, return 200 ETH to the Gyroscope GovernanceManager contract 0x78EcF97572c3890eD02221A611014F30219f6219 on Ethereum by 18:30 UTC on February 5th. If you would prefer to communicate in private, you can contact security@gyro.finance.

English
8
2
58
4.4K
ControlZ
ControlZ@ControlZ_1337·
@HackenProof Rewarding in terms of payout or rewarding in terms of fun and interesting?
English
1
0
5
595
HackenProof
HackenProof@HackenProof·
What’s the most rewarding bug you’ve caught?
English
9
2
34
2.7K
ControlZ
ControlZ@ControlZ_1337·
@kikidahDev Tried to do it myself about a year and half ago, worked kinda meh
English
1
0
0
28