ret2basic.eth

@taichiaudit Founder | Whitehat doing mediations @Immunefi | Core Member @DeFiHackLabs

[ret2basic.eth @ret2basic]

@adeolRxxxx steroid

[ret2basic.eth @ret2basic]

Easter egg trigged

[ret2basic.eth @ret2basic]

11 crit/high reports submitted to the same program, 3 dups, others waiting review🤣

[ret2basic.eth @ret2basic]

A very stupid feature because each submission is endorsed by a user deposit, rate limiting is pointless

[ret2basic.eth @ret2basic]

@0x3b33 @coffiasse 20 studio dup check 75 submission 250 mediation flip wrong triage and another 250 flip protocol closing for private known issue

[ret2basic.eth @ret2basic]

@adeolRxxxx 😂I will be very surprised if any of them is paid. Under this bug density the protocol will go bankrupt soon

[ret2basic.eth @ret2basic]

11 crit/high reports submitted to the same program, 3 dups, others waiting review🤣

[ret2basic.eth @ret2basic]

Submitted 2 High severity bounty reports to Cantina and let's see how it goes😜Wish me luck and mental health

[ret2basic.eth @ret2basic]

@anchabadze Not typo🤪

[ret2basic.eth @ret2basic]

@WhiteknightKK 我也没抱期望就是来试试水 猜到是这样了

[ret2basic.eth @ret2basic]

Unfortunately I had one very similar case on cantina today lol, an unfixed critical marked duplicate and it shows the original report was rejected and I can't see the details.... Again I am very confused but that's the norm of beg bounty now, moving on to next target

[Martin Marchev @MartinMarchev]

Update: Immunefi upheld the duplicate closure.

Their own fix-bypass policy says a bug that wasn't effectively fixed should be reported.

That's exactly what I did. The PoC in my report still works after the attempted fix.

Yet their mediation response didn't even mention the fix-bypass policy.

So what's the point of having it?

Why would any whitehat spend time checking whether a fix actually works if the answer is still "duplicate, no reward"?

I thought Immunefi was supposed to keep this fair.

Instead, they're keeping their clients happy.

[ret2basic.eth @ret2basic]

@0zSchnack Private known issue means you reported so they know it now, if you disagree just pay another 250 bucks and Mr.J will run prompt "find an execuse to close this mediation" and respond to you within 30 minutes

[ret2basic.eth @ret2basic]

@MartinMarchev In my experience only one specific mediator is fair and others just use pure ai and the prompt is "find an excuse to close this mediation"

[ret2basic.eth @ret2basic]

@Parth0x108 It is private known issue😂

[ret2basic.eth @ret2basic]

@v4rvl Thought the same, no expectation here

[ret2basic.eth @ret2basic]

Submitted 2 High severity bounty reports to Cantina and let's see how it goes😜Wish me luck and mental health

[ret2basic.eth @ret2basic]

@sahuang97 Already one dup!

[ret2basic.eth @ret2basic]

@0x15_eth I heard the same story from quite a few people😂Bro you are scammed just tag them here

[ret2basic.eth @ret2basic]

@Vesko_210 @Merulez99 Your cvp covers opus 5.5? Mine gets refusal quickly so I just opus 5.5 for fixing tool source code

[ret2basic.eth @ret2basic]

@mylifechangefa1 @catina No I mean you tagged the wrong person😂