GothicShanon

35 posts

GothicShanon

GothicShanon

@GothicShanon

2SGT5uX5G5MhRUwdsqwwkDhuPcBg1i1Z694YDC5Vpump

Katılım Mart 2026
2 Takip Edilen35 Takipçiler
Sabitlenmiş Tweet
GothicShanon
GothicShanon@GothicShanon·
Even after hitting Rank #4 on @immunefi leaderboard... I've received ZERO dollars. Not a single fund, not one payout. Submitted: 2 High + 14 Critical reports for @injective Bug hunting life was going okay... until this one massive find.
English
5
6
24
6.6K
GothicShanon
GothicShanon@GothicShanon·
Team @solana ZK ElGamal proof verification flaw (Token-2022) enabling forged proofs YES stolen funds possible → attackers could mint/withdraw tokens without authorization github.com/solana-labs/so…
English
0
0
3
152
GothicShanon
GothicShanon@GothicShanon·
Why my posting not showing here
English
1
0
2
218
GothicShanon
GothicShanon@GothicShanon·
@solana ZK ElGamal proof verification flaw (Token-2022) enabling forged proofs YES stolen funds possible - attackers could mint/withdraw tokens without authorization
English
0
1
1
65
GothicShanon retweetledi
Mentor | 👑🔺
Mentor | 👑🔺@mmentoredu·
Unacceptable A Top 4 Immunefi hacker finds critical vulnerabilities, reports them responsibly and gets $0 You want whitehats? You pay them Otherwise don’t be surprised when the next one exploits instead of reporting 2SGT5uX5G5MhRUwdsqwwkDhuPcBg1i1Z694YDC5Vpump @GothicShanon
English
5
16
48
5.9K
GothicShanon retweetledi
GothicShanon
GothicShanon@GothicShanon·
@ethereum @VitalikButerin DoS via malicious P2P handshake (invalid EC public key / RLPx handshake flaw) Fixed github.com/advisories/GHS…⁠ NO direct theft, but YES chain disruption → attacker can crash nodes, potentially halting network operations affecting funds availability
English
1
2
6
692
GothicShanon
GothicShanon@GothicShanon·
I mentioned all think in github please check first
English
3
0
2
417
GothicShanon
GothicShanon@GothicShanon·
I have a detailed list of large organizations with multiple critical vulnerabilities that were missed. I can privately reach out and coordinate fixes with their teams, or publicly share full details here. What do you want me to do about this?
English
4
4
18
1.7K
GothicShanon
GothicShanon@GothicShanon·
@binance @BNBCHAIN @cz_binance Suggestion to strengthen further: • Set explicit minimal workflow permissions (contents: read) • Pin all Actions to commit SHA • Enable CodeQL + secret scanning This prevents recurrence.
GothicShanon@GothicShanon

Hey @binance @BNBCHAIN, just checked your Skills Hub repo github.com/bnb-chain/skil…. Found 4 critical +11 high vulns – GITHUB_TOKEN leaks, workflow injections & takeover possible in seconds. Auditor dropped POCs, you guys fixed it super fast! Props for the quick security patch

English
0
0
1
506
GothicShanon
GothicShanon@GothicShanon·
Hey @binance @BNBCHAIN, just checked your Skills Hub repo github.com/bnb-chain/skil…. Found 4 critical +11 high vulns – GITHUB_TOKEN leaks, workflow injections & takeover possible in seconds. Auditor dropped POCs, you guys fixed it super fast! Props for the quick security patch
English
1
3
9
1.2K
GothicShanon
GothicShanon@GothicShanon·
Yo Backpack wallet fam GitHub repo screams red flags: code UNAUDITED last commit 2+ years ago (frozen since ~2024), no bug bounty, stale deps = vuln risk. No public audit proof even in 2026. Seed safe? Use Ledger + burner only! @Backpack plz check
fabiano.sol@FabianoSolana

- No insiders - No VCs - No team tokens Just users Backpack TGE is tomorrow 🎒 Stake or dump? Let's find out: 1️⃣ Tokenomics - 25% at TGE (24% points + 1% Mad Lads) - 37.5% pre-IPO (unlocked by achievements) - 37.5% post-IPO (fully locked until 1 year post-IPO) The community will be the only one holding tokens for the first weeks, and new tokens only get "minted" when certain milestones are achieved. What those milestones look like is unknown so far. The whole idea is similar to MetaDAO's idea of unlocking team tokens at certain FDV thresholds — but still very different. Pre-IPO tokens don't all go to the team, and it's more important for Backpack to meet company KPIs than to hit a certain FDV. Team allocation goes to the "Corporate Treasury," locked until at least one year post-IPO. The team owns equity in the company, and the company owns a large share of the token supply. 2️⃣ TGE and Airdrop As mentioned, the community will own 100% of the circulating supply. Prediction markets currently suggest an FDV of $300M, which would imply an airdrop worth $75M and 1 point = $0.20. 1 Backpack point ≈ $0.20 1 Mad Lad ≈ $350* *I doubt everyone will get the same allocation for Mad Lads tho. Armani has always talked about rewarding loyalty — see a proposed model below. Overall, short-term price action shouldn't be overvalued, especially in a bear market and with a project like Backpack. This could take months or years to reach the price it deserves. 3️⃣ IPO Model While other exchanges like Binance, Crypto. com, and KuCoin mostly did ICOs or private sales with less than 15% initial supply, Backpack is going dual: token and IPO. A dual model means profits are somehow split between token holders and equity holders. That usually ends with either two weak assets — or one strong and one down bad. Guess which one is normally down bad... There's a risk we get a token that the team and investors don't actually want to hold. And IPOs take years. The upside? The token will likely trade at a premium pre-IPO. A dual system (token + equity) has never worked before. But honestly if anyone can pull it off, it's Backpack. 4️⃣ Numbers and future - $400B+ cumulative trading volume - $100M+ annual revenue in 2025 - $1B pre-money valuation (unicorn status) - 150+ countries served Future plans include: - Tokenized stock trading (real ownership rights) - Physical cards - Checking and savings accounts - Real-world assets (gold, oil, commodities) 5️⃣ Stake or dump? Backpack announced that 20% of their equity will go to users who stake for 1 year — something no one has done before. This gives the community a real chance to own a piece of the company. (Love this.) But this market is tough, and I know a lot of farmers who've been waiting on this airdrop for months trying to offset losses. People need liquidity. The price action isn't in Armani's hands, but I'm sure $BP will find its fair price over the years. If you need the money — dump it. The price could definitely go lower. If you don't, and you believe in Backpack's vision join the experiment and forget about what you staked. There's a solid chance you get rewarded in a few years. Overall, you can complain that the whole seasons thingy went on way too long but Backpack is one of the teams in crypto with the highest moral compass. They tried to do things the right way, without creating unnecessary risk for themselves, the platform, or the community.

English
0
1
9
1.2K
GothicShanon
GothicShanon@GothicShanon·
Crypto community had my back when shit hit the fan – they showed love, called out the ruggers, kept it real for me So now I'm here FOR y'all. Supporting you directly, No more whitehat free labor for ungrateful protocols.If you're riding for community over everything – we locked
English
8
10
43
3.4K