DeltaXV

protecting your favorite blockchain | Go/Rust | security researcher @immunefi @cantinaxyz @sherlockdefi

[DeltaXV @DeltaXV_]

1 months ago I've discovered a critical vulnerability in @MezoNetwork's AssetsBridge precompile which could have led to a direct theft of $1,753,958.4 ($40m if no ratelimit).

happy to share the security advisory (includes full report + PoC) and mezo post-mortem write-up.

https://t.co/HrwTU95Duj

I'm also planning to post soon an X article about this finding which will include much more context on my journey and this discovery.

[DeltaXV @DeltaXV_]

@shealtielanzz @kirkthebaird @RareSkills_io @immunefi Very impressive for such complex tech! Congrats 🫡

[WhiteHatMage @WhiteHatMage]

> Actually reporting the vulnerability was more difficult for the researcher than we would prefer...

I feel you. Projects that don't host bounty programs usually have some hidden Criticals, and it's hard to contact them.

Great job by our fellow whitehat and by the team.

[DeltaXV @DeltaXV_]

@Ehsan1579 @MezoNetwork That's textbook ethermint bug lol

[DeltaXV @DeltaXV_]

1 months ago I've discovered a critical vulnerability in @MezoNetwork's AssetsBridge precompile which could have led to a direct theft of $1,753,958.4 ($40m if no ratelimit).

happy to share the security advisory (includes full report + PoC) and mezo post-mortem write-up.

https://t.co/HrwTU95Duj

I'm also planning to post soon an X article about this finding which will include much more context on my journey and this discovery.

[DeltaXV @DeltaXV_]

@WhiteHatMage Going outside bbp is very risky, as most of protocols just don't care about security, it even goes to a matter "am i going to get blocked" lol

Either way sometimes you get lucky and come across great protocol teams like @MezoNetwork etc.

[DeltaXV @DeltaXV_]

@mhluongo @Tradus138519 @MezoNetwork Exactly, this industry would be doing much better if there were more protocols that followed Mezo's example in the way they handle security and treat security researchers 🤝

[DeltaXV @DeltaXV_]

@Tradus138519 @fromeo_016 @MezoNetwork there's way more context that would also justify a higher appropriate bounty but atleast the token airdrop paid off too.

[DeltaXV @DeltaXV_]

@fromeo_016 @MezoNetwork Thanks ser!

[DeltaXV @DeltaXV_]

@0xWeb3boy @MezoNetwork 🫡

[DeltaXV @DeltaXV_]

@HarisEbrat @MezoNetwork They did despite current economy 😆

https://t.co/nfzo3wnUnc

[DeltaXV @DeltaXV_]

@fromeo_016 @MezoNetwork Yes, 50k plus a very generous allocation in the mezo airdrop.

https://t.co/nfzo3wnUnc

[DeltaXV @DeltaXV_]

@fromeo_016 @MezoNetwork Currently they don't have, but you can still disclose privately they will handle the report.

[DeltaXV @DeltaXV_]

@LoopGhost007 @MezoNetwork Thanks! soon they will host a bbp program. But If you find anything valid they will handle it seriously🫡

[DeltaXV @DeltaXV_]

@MezoNetwork https://t.co/nfzo3wnUnc

[DeltaXV @DeltaXV_]

@Wangsamuels @immunefi Thx 😁

[DeltaXV @DeltaXV_]

Big respect and thanks to @immunefi and the protocol security team for such fast and nice experience through the whole flow.🫡

[Immunefi @immunefi]

Happy Monday.

Security researcher @DeltaXV_ just earned $20,000 for finding a High blockchain/dlt vulnerability.

We're sure they'll find their first crit soon. We'll be watching.

To help Delta get to the next level, you can pledge IMU behind them here: https://t.co/MUsBzmWgtk

[DeltaXV @DeltaXV_]

@yashar0x @immunefi Thanks ser🔥

[DeltaXV @DeltaXV_]

@nemesis_sol_ @immunefi Thx 🫡

[DeltaXV @DeltaXV_]

@bbl4de_xyz @code4rena @RujiraNetwork Congrats 🔥

[DeltaXV @DeltaXV_]

@RUTILE_Inc @immunefi Nice, maybe another time!

[DeltaXV @DeltaXV_]

I just found a bug and got paid on @immunefi #immunefitribe https://t.co/gZxCqm0Cxq