Vitor Fernandes

Smart Contract Security Researcher (Solidity + Rust)
Fixing Vibe Coder's Bugs

[Vitor Fernandes @Rapt00rVF]

"It's a feature"

[sujith @sujithsomraaj]

This was the very bug I reported to @axelar two years ago on @immunefi and the team closed it saying the report is invalid.

[Vitor Fernandes @Rapt00rVF]

R.I.P Dan 😢

[Radix - Radically Different DeFi @radixdlt]

https://t.co/6gYAPvG2Ms

[Vitor Fernandes @Rapt00rVF]

One of the best projects ever developed

Scrypto (rust) it's so simple to understand, their engine with native assets (FTs, NFTs, etc), and the TX Manifest are amazing!

[Dan Hughes | Radix @fuserleer]

Hyperscale 16 shard community test to 80,000 SWAPS/s

Nothing has done that, nothing even close😎

Globally distributed, 100+ nodes, some as low as 4 core / 8G. Some on laptops running with battery and WIFI.

[Vitor Fernandes @Rapt00rVF]

Appreciate it!!!

Simple but funny, enjoy :)

[HackenProof @HackenProof]

New blog post alert!

Check out how a critical vulnerability in @Ternoa_ 's Auction Pallet was discovered and fixed, ensuring the security of NFT transactions. Big thanks to @Rapt00rVF and our community for their crucial role in keeping blockchain safe!

Link in comments 👇

[Vitor Fernandes @Rapt00rVF]

I've just published a new bug writeup (simple, but cool)

https://t.co/JYwUSjTx6o

[Vitor Fernandes @Rapt00rVF]

lol

I wasn't expecting that 😅

[Polaris_tow @Polaris_tow]

Nice experience @HackenProof

[Vitor Fernandes @Rapt00rVF]

@caioluders dipirona?

[Vitor Fernandes @Rapt00rVF]

@k33r0k jaja tem @duph0use dnv (não que seja uma vantagem)

[Vitor Fernandes @Rapt00rVF]

Hi, I've just published a writeup of a Bug that I found during my huntings :)

https://t.co/PqrA8zsJrB

[Vitor Fernandes @Rapt00rVF]

Preciso fazer uma camisa com essa segunda afirmação

[Pop Punk 🇺🇸 @PopPunkOnChain]

@i_am_wilf First off I didn't write the contract.

Second off, this was not an exploit. This was functionality that was written into their contract.

The reward math favored being fast to spawn through.

Anyone could do this.

[Vitor Fernandes @Rapt00rVF]

Do caralho

[cygaar @0xCygaar]

An explanation of the NFTTrader hack that resulted in millions of dollars worth of NFTs stolen 🧵:

(TLDR; combination of reentrancy + old approvals that were never removed)

[Vitor Fernandes @Rapt00rVF]

Here is the slides of my talk about Hacking Smart Contracts in Bug Bounty Village at @h2hconference 2023 :)

Hope you enjoy !

https://t.co/RIm5PD8OmW

[Vitor Fernandes @Rapt00rVF]

:)

[TRAMOIA @tramoia_sh]

https://t.co/Q9xRjqf8yQ
??.??.2024

[Vitor Fernandes @Rapt00rVF]

Let’s bora!

[0xTeles @0xTeles]

🚨 @Hacker0x01 Bug Bounty Village na @h2hconference!!!!

A agenda da nossa village de bug bounty na H2HC já está disponível. Vamos ter talks absurdas com bastante história e tricks.

Para participar dos sorteios que irão ocorrer, se cadastra aqui:
https://t.co/Nq9QBSpHT4

[Vitor Fernandes @Rapt00rVF]

@caioluders 👀

[Vitor Fernandes @Rapt00rVF]

I've got $5000 bounty for a High severity vulnerability found in an IAM Blockchain protocol which allowed an attacker to steal any token of arbitrary users.

Writeup soon :)

[Diego F. Aranha 🕷️ @dfaranha]

Estava assistindo a Globo News brasileira para acompanhar a cobertura do conflito Israel-Hamas e... descobri que a Xuxa está vendendo NFT? Que diabos?

[Vitor Fernandes @Rapt00rVF]

I've just published my research about hacking launchpad applications that was made in 2021 ( sorry for delay to publish it :] )
https://t.co/RFp2MWZp7A

[Vitor Fernandes @Rapt00rVF]

Satisfatório :)

[Lee | 33Labs @33audits]

@ZKasino_io Just in case enough people haven’t commented this yet….