Jiri123 🪐

Security Researcher @cantinasecurity

[Jiri123 🪐 @Jiri123_eth]

This was the first Critical issue I discovered through a bug bounty.

I was incredibly lucky.

What’s even more amazing is that LLMs played a big role in helping me find it.

[Cantina 🪐 @cantinasecurity]

Bounty payouts continue on Cantina: @Jiri123_eth has earned $75,000 for his latest contribution.

Cantina engagements demand in-depth protocol understanding, advanced reversing, and the ability to navigate complex systems. Jiri consistently delivers across all fronts.

[Jiri123 🪐 @Jiri123_eth]

@gosasu1 @Zcash @osec_io Legend

[Jiri123 🪐 @Jiri123_eth]

@0xFireFist That's interesting, I got cyber refusal with this skill

[ckrielle @ckrielle]

It was always a dream to travel beyond Europe for a CTF. Thanks to #SCAN2026 and #KBW for the opportunity to experience this in Seoul. Even in the AI era, the CTF was enjoyable! Cheers to all our competitors, and especially to my awesome teammates @Jiri123_eth @leangotroot

[Jiri123 🪐 @Jiri123_eth]

Update on rescued NFT:
you can claim at https://t.co/HM1nF9fcNt now

[Quit @0xQuit]

these assets are now available to claim at https://t.co/SLbwhpBoTW

[Jiri123 🪐 @Jiri123_eth]

Update on my rescued NFTs:
I'm currently in talks with Quit about integrating them. I'll share update once it's ready.

[Quit @0xQuit]

Claim site is live. If I was able to save your NFTs, you can now reclaim them. You will have to revoke the PaymentProcessor approval first, if you haven't already.

You may also opt to donate as part of your transaction.

https://t.co/Tl6y90BQz7

[Jiri123 🪐 @Jiri123_eth]

@RealPapii @0xQuit I rescued 713 Quirklings. They are safu.
My address: 0x1234248d4b9525f42434e20d46abbff2686f56b3

[Jiri123 🪐 @Jiri123_eth]

@0xQuit @MagicEden @mfigge

[Jiri123 🪐 @Jiri123_eth]

Actually I'm don't like whitehat drains, but this one had already public and executed by @0xQuit.
I hold an additional list of wallets affected by the exploit. I tried to reach him but haven't heard back,
so I'm rescuing as many assets as I can before a malicious actor does.

Rescued NFTs are held at 0x1234248d4b9525f42434e20d46abbff2686f56b3 and will be returned to their rightful owners.

[Cirrus @CirrusNFT]

No idea whats going on here but I just watched this wallet drain 3832 NFTs from 100s of different wallets

May be a good idea to revoke all NFT permissions if you have any valuables in your wallet

Seems to be funded from a wallet possibly linked to @0xQuit so maybe a whitehat?

[Jiri123 🪐 @Jiri123_eth]

Some project, you must pay $250 just for mediation request.

Free: 4+ weeks
Priority($250): 30 business day (6 weeks)

I paid $250, so we'll see what happens.

[Jiri123 🪐 @Jiri123_eth]

So that’s why the 5-hour limit was never a problem, but I kept burning through the weekly limit. Feels like I got scammed.

[SataEric @SataEricUX]

The whole “20x” in Claude’s pricing is so misleading.

The $100 plan says 5x Pro limits, while the $200 plan says 20x Pro limits. That makes it sound like you’re getting 4x the usage.

But the 20x applies only to the 5-hour usage window. The weekly limit is basically just 2x the $100 plan.

I spent way too much time digging through the internet and Reddit to figure this out. They could’ve just stated the limits directly instead of marketing it as “20x.”

That alone would’ve saved me hours of confusion.

[Jiri123 🪐 @Jiri123_eth]

Good bye my 1 week long best friend

[Z.ai @Zai_org]

Introducing GLM-5.3-Flash

- Leading capabilities at a highly competitive price
- Natively multimodal with a 1M-token context window
- A 320B-A18B model released under the MIT License
- Previously previewed as Ox Alpha, running entirely on Chinese AI chips

Blog: https://t.co/tzOmB7gdZP

Available now across all official platforms:

Weights: https://t.co/9LRMahY9Wa
API: https://t.co/VcaQnzYmS9
Coding Plan: https://t.co/Nk8Y98HNhU
ZCode: https://t.co/Peepqv4XSx
Chat: https://t.co/WCqWT0qCQb
AutoClaw: https://t.co/aGEG5HqTTb

[Jiri123 🪐 @Jiri123_eth]

@shibi_kishore They still using V1?

[Jiri123 🪐 @Jiri123_eth]

@schattenFeuerr I can but it's obvious duplicate 🥲

[Jiri123 🪐 @Jiri123_eth]

This is how to lose $50 in 4 minutes.

[Jiri123 🪐 @Jiri123_eth]

@hanzceo It's Non-refundable.
Hey @immunefi let me in

[Jiri123 🪐 @Jiri123_eth]

Just remembered this happened to me two years ago.

[Jiri123 🪐 @Jiri123_eth]

@gosasu1 so do I 😅 I miss the days when we used to get together and stay up all night doing CTFs.

[Jiri123 🪐 @Jiri123_eth]

If you are planning to launch a Uniswap V4 experimental token, or thinking about investing. Please get it audited. At least, paste the contract into Claude and ask if it's safe.

Don't give easy money to hacker.

[Jiri123 🪐 @Jiri123_eth]

Most projects close bug bounty reports with simpe line:
"That is trusted"

The worst hack always starts with that exact same assumption.

[riptide @0xriptide]

Reporting an RPC spoofing attack to Layerzero would net you a max critical bounty