Write-ups · Web3 & smart contracts

Findings, told from scope to fix.

Bug bounty reports, CTF challenges and labs. Each one gives its severity, its CVSS score, its CWE and what the program decided. Published only once fixed and cleared for disclosure.

Nothing published here yet. A write-up goes online once the issue is fixed and the program allows disclosure, never before.

Newsletter

Get the fix before the exploit goes viral.

One email when there is something to show: a new video, a write-up cleared for disclosure, or an advisory that hits a stack we cover. No weekly recap, no fear-selling.