@bytes032.xyz

@dnobel22 12

@bytes032 have you changed the maximum number of agents running simultaneously given you use the ultra setting? the model should be much cheaper than fable 5 soo yeah

using gpt 5.6 sol ultra on fast i burn the 5 hour limit in ~1 hour of actual work one session = 16% of the weekly cap meaning each account is 6.25 hours of real work per week a normal 9h day, 5 days a week = 8 accounts and that's before the free resets. pretty good deal tbh

@0xRookmate i wanna yeet it

@bytes032 Do you really need ultra for all the tasks though? I find high and medium good for most tasks

@blchead @MeteoraAG > If the issue was already known, why does it remain exploitable on production? Plenty of unncessary FUD here. The answer is pretty evident. It is called acceptable risk.

I recently submitted a CVSS 7.7 (High) authorization vulnerability affecting @MeteoraAG Before sharing fully transparent (BUT removing critical info) I spoke with team and as I don't agree with that, I want to know CT opinion. The issue allows a configured shareholder to divert one side of dual-token fee claims, resulting in DIRECT THEFT of protocol/partner fee revenue. - A shareholder with even a 1-unit share can steal 100% of one token side. - The attack is repeatable on every fee accrual. - The theft is silent (the diverted fees never appear in the vault or events). It undermines the fundamental guarantee that fees are distributed according to shareholder allocations. The report was classified as DUPLICATE. After I followed up with additional evidence, including: - an end-to-end PoC reproduced on a local fork, transaction hashes, - proof that the issue remained exploitable on deployed binaries, - blast-radius analysis covering thousands of affected vaults, Meteora responded that: - the issue is still exploitable on the deployed DFS integration; - the duplicate status is only about bounty eligibility, not the validity of the finding; - that my PoC and exposure analysis are useful for prioritization. This raises a question I'd like to discuss with the bug bounty community. If the issue was already known, why does it remain exploitable on production? And more broadly: How is a researcher supposed to know whether a live vulnerability is already known internally? From the outside, there is no distinction between: - a brand-new vulnerability, - one that has already been privately reported, - one that is internally tracked, - one awaiting a future fix. Every one of those requires the same audit effort, reverse engineering, code review, exploit development, and responsible disclosure. I'm not questioning the duplicate policy itself bc most bug bounty programs have one. I'm questioning the lack of transparency around known-but-unpatched vulnerabilities. Should protocols provide more visibility when a CVSS 7.7 (High) issue capable of silently diverting protocol fees remains live? Or is it simply accepted that researchers may spend days producing original analysis and PoCs for vulnerabilities that have zero possibility of a reward because that information is impossible to know beforehand? I'd be interested in hearing how both protocol security teams and other researchers think this should be handled.

@Bfaviero Not an excuse

@bytes032 I’m Brazilian but ok

The microscopic VAR calls are ruining soccer If a light touch gives *effectively* zero change to the ball's trajectory, it should not undo a goal

@HunterBiden @ASvanevik @gmoneyNFT Lmao

@gmoneyNFT Hyperliquid

holy shit, he's going to run for president

@UBERSOY1 just call it chay

The best pronunciation of “tea” is “Tay,” which is the original 17th-century English pronunciation of the word.

@Adrien_B_A Also there's literal shit in the metro

I hate Paris I spent the last 4 days there, but I also lived there for around 2 years in total, so this is not a tourist opinion Every time I go back, I have the same question: Why do so many people accept living like this? No air conditioning, too much insecurity, public transport that sucks, tiny overpriced apartments, noise, stress, dirt, and the feeling that the city is slowly eating your nervous system Also, the two usual excuses don’t hold 1. If you are an entrepreneur, you say: “I need to be close to the ecosystem” Nah, if you want a real global tech ecosystem, go to San Francisco or Shenzhen Don’t stick to the BPI-subsidized environment If you want to build in France with a better life, go to Nice: sea, mountains, airport, security, food, light, Italy next door, Monaco nearby 2. If you are an employee, you say: “Salaries and jobs are better in Paris” Sometimes, yes But €2,500 net per month in Paris is not a good salary It is survival with a dedicated path to becoming the kind of guy who runs during the week and takes drugs in techno clubs on weekends to escape his 9 to 5 You pay insane rent, sweat in the metro, sleep badly, queue for everything, and live surrounded by communists and wokists I don’t buy it Please explain to me

We reported a critical loss of funds bug to @Thorchain (32M TVL, 150M FDV) They silently patched it and told us their bug bounty program is permanently retired. We have more Thorchain chain halt DoS vulns. We intend to release them (open disclosure) in the coming few days

@blckhv gotta get em free euros

@bytes032 bg minister of tourism arc

If you are not choosing E you are retarded

@limitlesstack It fucks your sleep badly bro like real bad but otherwise its good if you're pushing for something but daily yeah its cooked

What the post is saying that slackers, slacked even more instead of being more productive. Who would have thought?

@levelsio I don’t even look at the code lmao

I don't write code anymore I haven't written code in I think 6 months? I think everyone is like this no?

@InHeavenWeLive savage

It dosent matter if you’re 🇸🇮 gay 🇧🇦 an amputee 🇲🇪 ??? 🇷🇸 genocidal 🇭🇷 genocidal 2 🇦🇱 a cocaine dealer 🇲🇰 bulgarian 🇷🇴 a thief 🇬🇷 brown 🇽🇰 poor 🇧🇬 mongolian 🇭🇺 mongolian 2 🇹🇷 all of the above Together we are the BALKANS

@banteg cooked

situation: all three ef protocol leads have left

today we are releasing a qemu escape

raycast command to trigger a skill who's doing this