kodyvim

Resident & Security Researcher @cantinasecurity | Request an audit 📝 @

[kodyvim @kodyvim_]

Thanks for the opportunity @cantinasecurity

[kodyvim @kodyvim_]

@0xmishoko Link to repo?

[rekdt @rekdt]

The only way to stop hackers from hacking you is to hire hackers to hack you before the hackers you didn’t hire hack you

[kodyvim @kodyvim_]

@0xAthos @slayersecurity We can

[kodyvim @kodyvim_]

@ParlayItGG hey

[kodyvim @kodyvim_]

@ChelseaFC @ChelseaJewishSG Never again 🕯

[Remedy @xyz_remedy]

Three new queries approved.

@0xangky lags liquidation executed without health factor validation, allowing unsafe position closures.

@kodyvim_ flags contract logic that updates state via memory copy, creating silent data corruption risks.

@baptonic3 flags missing message origin validation in LayerZero V2 LZCompose, enabling cross-chain message spoofing.

Queries below:

[kodyvim @kodyvim_]

@Iam_Lekinx @festy_o He's telling you a simple fact, you think that's the only strait in world? Who collects toll on a natural waterways.

[kodyvim @kodyvim_]

@phil_uplc @bangjelkoski @injective It's quite laughable for a protocol to say the exploit would be rate limited with users funds at risk. It's shows that some of this protocols acts in bad faith and negligence.

[kodyvim @kodyvim_]

@Manassacl5o @Inghams85 @BorgFella420 @WarMonitor3 Yes not to mention seizing Russian linked shadow fleet vessels which no other admin had the balls to do. Also asking Europe to tighten and enforce the sanctions and pressuring India to stop buying Russian oil. The list can go on. Don't know some ppl can be this ungrateful.

[kodyvim @kodyvim_]

Phase 2 of the contest is live, no end date. LFG Anon! https://t.co/HJxgprlJmw

[kodyvim @kodyvim_]

Found a vuln in a BSC voting contract
(0xC06e39FdC14DbBcdDdDB72cE5903f359D89b9813 – HftVote)

Spotted using @xyz_remedy’s Glider during the contest.

Core flaw: live balance voting
flash loans = manipulated voting power
token transfers = double voting
👇

[kodyvim @kodyvim_]

Glider tore through on-chain data in seconds and flagged it instantly.
Massive for spotting vulnerabilities across chain or deployments.
Huge props to the @xyz_remedy team for building such a powerful free tool for researchers.

[kodyvim @kodyvim_]

@newshound2032 @OSINTWarfare @dansk_holger So why didn't Iran provide the details of how they shot them down? The "Intelligent" one

[kodyvim @kodyvim_]

@Haydar187 @AliB23476239 @Currentreport1 Am not underestimating Iranian missiles am just saying is not smooth sailing launching ballistic missiles from Iran to Ukraine. Would you take the risk of having a missile fly over your head before reaching your neighbor.

[kodyvim @kodyvim_]

@mskategirl @hilalove_x @VividProwess @nypost Stop trying to be funny, iron dome have a success rate of over 90% not 100% if he said it intercepted almost all and did it's job perfectly. He's right.