Mixas.eth

Build some interesting things. Building is my addiction

[Mixas.eth @MihailVarich]

@0xtruthlover For some reason I'm sure most of them are pure ignorance like "Tell me how to do $1 on BB?"

[Mixas.eth @MihailVarich]

@Dinma0x Sad, but true :(

[Mixas.eth @MihailVarich]

@HeliosButWeird @Zhitnipalzhi Изи же сейчас проверить

[Mixas.eth @MihailVarich]

Who would have thought that finding a unique vulnerability isn't the hardest part of bug bounty programs...

[Mixas.eth @MihailVarich]

@immunefi Okay, the last point hasn't happened yet, but the current trend of submitting and reviewing reports is leading to exactly that. For some reason, bug bounty hunters must go through the seven circles of hell to be useful.

[Mixas.eth @MihailVarich]

I contact the project team, reporting a critical vulnerability I've discovered.
They ask me to submit a report to @immunefi, indicating "Out of scope," and team will review it.
ImmuneFi rejects the report due to "Out of scope."
Bug is being exploited by attackers, costing M of $.

[Mixas.eth @MihailVarich]

Okay, I understand that there's an influx of AI-slop in bug bounty programs right now. But I think the bug submission platforms are overreacting, setting the requirements way too high. As if I'm the one who's going to lose a ton of money if the bug isn't fixed lol

[Mixas.eth @MihailVarich]

@vinibarbosabr @joranhonig That's true. No one there is genuinely interested in the bug fixing. I'm simply amazed at how bureaucratic everything is in the projects.

[Mixas.eth @MihailVarich]

@guyywww @cantinasecurity Congrats!💪

[Mixas.eth @MihailVarich]

The verification system on @immunefi is pushing White hats to the dark side😤
I can't file a vulnerability report for save millions of $ because of the terrible verification system.
I'm not against verification, but there are normal services out there!

[Mixas.eth @MihailVarich]

@Rsam_eth Was your report accepted?

[Mixas.eth @MihailVarich]

Do you know who else has the same architecture and smart contract capabilities as ethereum:0xcf5104d094e3864cfcbda43b82e1cefd26a016eb ?
$eUSD
Mint can called by an admin and hasnt supply cap. I'm not claiming anything, but keep that in mind.

[Mixas.eth @MihailVarich]

Fun fact: After the tokens were sold, the contract was blocked, and now transfers of ethereum:0xcf5104d094e3864cfcbda43b82e1cefd26a016eb tokens are completely impossible.

[Mixas.eth @MihailVarich]

10,000,000,000 ethereum:0xcf5104d094e3864cfcbda43b82e1cefd26a016eb @Humanityprot was minted😵‍💫

It wasn't a contract error or bug—the mint was from the team's wallet. Access lost or...?

My detailed report of what happened
https://t.co/yRxSHdbfxx

[Mixas.eth @MihailVarich]

10,000,000,000 ethereum:0xcf5104d094e3864cfcbda43b82e1cefd26a016eb @Humanityprot was minted😵‍💫

It wasn't a contract error or bug—the mint was from the team's wallet. Access lost or...?

My detailed report of what happened
https://t.co/yRxSHdbfxx

[Mixas.eth @MihailVarich]

@alial1shan @Muntrive Congrats 🥂

[Mixas.eth @MihailVarich]

@GodLDeViL07 @intigriti Congrats! 🫡🔥
Hope I will get my first bounty soon

[Mixas.eth @MihailVarich]

@luq0xss

[Mixas.eth @MihailVarich]

My honest reaction when I found a critical bug with a potential bounty of up to $500,000, but two people already beat me to it.

[Mixas.eth @MihailVarich]

@Prathkum Even with free OpenRouter models in @FactoryAI droid, I get everything I need.
We need to focus on quality improvements and efficient resource use, not building a “Ratte”.