Mohamed Elsaed

باحث في الأمن السيبراني | مهتم بأمن العقود الذكية (Smart Contracts) واكتشاف الثغرات البرمجية | مؤمن بأهمية الكشف المسؤول (Responsible Disclosure) لتعزيز الأمان

[Mohamed Elsaed @MElsaed14410]

🚨 SECURITY ALERT: A critical logic vulnerability persists in @RujiraNetwork Ghost Vaults despite their recent "patches".

The protocol remains insolvent and user funds are at high risk. 🧵👇

[Mohamed Elsaed @MElsaed14410]

@xxxxataraxiaxxx @patriotsounds @fincontrarian @codehans1 @CBarraford @AaluxxMyth "@xxxatariax... I've sent the full report and the PoC to Hans as requested on June 18 and followed up on June 20. Still haven't heard anything back from him. I've done my part, just waiting for a response to make sure the users' assets are safe."

[Mohamed Elsaed @MElsaed14410]

@patriotsounds @xxxxataraxiaxxx @fincontrarian @codehans1 @CBarraford @AaluxxMyth "Code is neutral. It doesn't know you, it doesn't know me—it only knows if it's secure or exploitable."

[Mohamed Elsaed @MElsaed14410]

@patriotsounds @xxxxataraxiaxxx @fincontrarian @codehans1 @CBarraford @AaluxxMyth "I reported a critical logic vulnerability in rujira-ghost-vault (asset inflation/drainage). After submitting a verified PoC, I was blocked rather than the issue being addressed. As a security researcher, my ethical duty is to warn users before potential exploitation."

[Mohamed Elsaed @MElsaed14410]

@patriotsounds @xxxxataraxiaxxx @fincontrarian @codehans1 @CBarraford @AaluxxMyth "@patriotsounds I enjoy the sound of gunfire in the technical arena. The tracer round has been fired; final forensic PoC submitted to [email protected] at 22:26 UTC. The exploit is documented, and the ball is in their court. No bluffing, no spam—just protocol security."

[Mohamed Elsaed @MElsaed14410]

@Erudite3451 @RujiraNetwork "The PoC sent to your email [email protected] is what matters, not old screenshots. The technical report and reproduction script are in your inbox. Waiting for your assessment of the vulnerability."

[Mohamed Elsaed @MElsaed14410]

🚨 24h of silence from @RujiraNetwork on the critical logic vulnerability.

User funds are at high risk. Ignoring this increases the danger. The community deserves transparency.

🛑 إنذار أمني: الصمت تجاه هذه الثغرة يعرض أموال المستخدمين للخطر. نحتاج ردًا الآن.

[Mohamed Elsaed @MElsaed14410]

🚨 SECURITY ALERT: A critical logic vulnerability persists in @RujiraNetwork Ghost Vaults despite their recent "patches".

The protocol remains insolvent and user funds are at high risk. 🧵👇

[Mohamed Elsaed @MElsaed14410]

@fincontrarian @codehans1 @patriotsounds @xxxxataraxiaxxx @CBarraford @AaluxxMyth "Standard practice is ensuring the team is aware. I published the PoC for transparency and have sent all technical details to their official email as requested. Now, the priority is fixing the flaw, not debating protocols."

[Mohamed Elsaed @MElsaed14410]

@patriotsounds @xxxxataraxiaxxx @fincontrarian @CBarraford @AaluxxMyth "Thanks @codehans. I have sent the full technical audit report, including the reproducible test case (PoC) and methodology, to the email address provided. Looking forward to your technical review of the logic flaw."

[Mohamed Elsaed @MElsaed14410]

@patriotsounds @xxxxataraxiaxxx @fincontrarian @CBarraford @AaluxxMyth "Security isn't about followers, it's about code. Logic flaw in distribute_interest misallocates fees to the pool, not the fee_address.

If I'm wrong, show a Tx log where fees reach the fee_address. Otherwise, the risk is real.

https://t.co/d10DQjC1bk"

[Mohamed Elsaed @MElsaed14410]

@patriotsounds @xxxxataraxiaxxx @fincontrarian @CBarraford @AaluxxMyth "Calling a PoC 'spam' to hide a critical flaw is dangerous. I shared the exploit details via Telegram. Ignore the proof, but the bug persists in production, risking user funds. I'm here for security, not bounties. Fix it or explain."

[Mohamed Elsaed @MElsaed14410]

@fincontrarian "Everything is documented with timestamps and technical evidence. You can verify the full history of my reports to the team and their responses here: https://t.co/xg90hjT0iC"

[Mohamed Elsaed @MElsaed14410]

@fincontrarian "I reported a logic bug via Telegram (see screenshots). They patched the first issue, but a severe one in Ghost Vaults persists, putting funds at risk. Despite responsible disclosure, I’ve been met with silence. Transparency is a requirement."

[Mohamed Elsaed @MElsaed14410]

@THORChain @xolosArmy @KentonC137 @patriotsounds "Critical security update for Rujira LPs. Proof of exploit attached below."

https://t.co/ExGkX05f4d

[Mohamed Elsaed @MElsaed14410]

"Visual Proof: My PoC (v1.0.3) successfully triggers the insolvency state. The core logic flaw remains fully exploitable in production. Liquidity providers, please check your exposure."

[Mohamed Elsaed @MElsaed14410]

@30bgHitman @RujiraNetwork "I'm a researcher, not an attacker. My goal is to improve security, not exploit it. If they 'don't want to fix it,' that's their choice—but the community must know the risks. I act ethically, even if they don't."

[Mohamed Elsaed @MElsaed14410]

🚨 SECURITY ALERT: A critical logic vulnerability persists in @RujiraNetwork Ghost Vaults despite their recent "patches".

The protocol remains insolvent and user funds are at high risk. 🧵👇

[Mohamed Elsaed @MElsaed14410]

Over a week since I reported a critical liquidity-draining flaw to @RujiraNetwork. No fix, no response—just silence & blocking.

If Ghost Vaults are 'secure', why ignore a verified vulnerability? Transparency builds #DeFi trust. 🛡️

#

[Mohamed Elsaed @MElsaed14410]

Blocking researchers instead of fixing flaws is a massive red flag. 🚩

@CertiK @HackenClub @THORChain, take note.

If you have liquidity in @RujiraNetwork, pay attention. RT to protect the community. The truth must be seen. 🛡️

#DeFi #SecurityAlert #Rujira #BugBounty #Web3

[Mohamed Elsaed @MElsaed14410]

🚨 Security Alert: @RujiraNetwork

I’ve identified a critical flaw in Ghost Vaults allowing liquidity drainage.

I reported it via their official Bug Bounty, but the team chose to ignore the risk and block me instead.

Community funds are at risk. Check the evidence below. 🧵 1/3

[Mohamed Elsaed @MElsaed14410]

The vulnerability lies in the interest distribution logic, making the contract insolvent. My PoC confirms that assets can be drained entirely.

Despite my private warnings on June 6th and subsequent updates, the team has failed to apply a proper fix. 2/3

[Mohamed Elsaed @MElsaed14410]

@Fakk2 @THORChain @vultisig "Critical security update for Rujira LPs. Proof of exploit attached below."

https://t.co/ExGkX05f4d

[Mohamed Elsaed @MElsaed14410]

"Visual Proof: My PoC (v1.0.3) successfully triggers the insolvency state. The core logic flaw remains fully exploitable in production. Liquidity providers, please check your exposure."