Tun

Web 3 is currently the most proficient crowd-funding finance ecosystem. WAGMI is an illusion!

[f4lc0n @al_f4lc0n]

I Saved Injective's $500M. They Pay Me $50K.

I like hunting bugs on @immunefi . I'm decent at it.

- #1 — Attackathon | Stacks
- #2 — Attackathon | Stacks II
- #1 — Attackathon | XRPL Lending Protocol
- 1 Critical and 1 High from bug bounties (not counting this one)

Life was good. Then I found a Critical vulnerability in @injective .

This vulnerability allowed any user to directly drain any account on the chain. No special permissions needed. Over $500M in on-chain assets were at risk.

I reported it through Immunefi. The next day, a mainnet upgrade to fix the bug went to governance vote. The Injective team clearly understood the severity.

Then — silence. For 3 months. No follow up. No technical discussion. Nothing.

A few days ago, they notified me of their decision: $50K. The maximum payout for a Critical vulnerability in their bug bounty program is $500K. I disputed it. Silence again. No explanation for the reduced payout. No explanation for the 3 month ghost. No conversation at all. To be clear: the $50K has not been paid either.

I've seen others share bad experiences with bug bounty payouts recently. I never thought it would happen to me. I can't force them to do the right thing. But I won't let this be forgotten.

I will dedicate 10% of all my future bug bounty earnings to making sure this story stays visible — until Injective pays what I deserve.

Full Technical Report: https://t.co/lki2tL9bxw

[Tun @Tun_Views]

@RealCryptoCoach @XamanWallet @XRPLLabs @DropFiWallet Nice, I can remember when they added fees and did not about the backlash from the community. Thank you for doing the lord's work.

[Tun @Tun_Views]

@morsyxbt Projects should not be discussing tokens when they have not produced any product to tie the the token to. Thus, time before launching a token should be as short as possible.

[Tun @Tun_Views]

@The_Donsie Dude is so serious with the pleas, Anon Vee should better be wrong.

[Tun @Tun_Views]

Is this @hotdao_ extension wallet on @firefox, a scam?
I tried installing the extension directly from Hotwallet link (first pic) but unfortunately wasn't available for firefox users, but got the second pics from searching on firefox extension, but the stats did not add up.

[Tun @Tun_Views]

@Zolanear_ From all indications, there is a high likelihood of big disappointments awaiting all miners.

[Tun @Tun_Views]

@concero_io @pharos_network It gets worse overall, I will suggest caution when interacting with this Pharos project.

[Tun @Tun_Views]

@concero_io @pharos_network Geez, this Pharos website is too buggy. Please log your clear function properly on claim testnet token section, nothing seems to be working here.

[Tun @Tun_Views]

@mhknft Short content is more preferable, as it usually gets straight to the point.

[Tun @Tun_Views]

@mert So weird that this is what everyone has been asking for, "Decentralization", aha.

[Tun @Tun_Views]

@AnonVee_ More than enough, more than enough!!!

[Tun @Tun_Views]

@coinfessions Bro sold his manhood and bought erectile dysfunction 😥😅

[Tun @Tun_Views]

@0xdamx Network for everyone!

[Tun @Tun_Views]

@Zun2025 @boundlesshq A long read and insightful thread on how boundless increases overall efficiency such that projects like Cysic can as well benefit

[Tun @Tun_Views]

@union_build All about Union Builds

[Tun @Tun_Views]

@mert Wen ser?

[Tun @Tun_Views]

@wenwencoin Happy international Cat day, Wen

[Tun @Tun_Views]

@CarbzXBT It is all trial and error yet.

[Tun @Tun_Views]

@phantom @wenwencoin is highly represented.

[Tun @Tun_Views]

@AlexOnchain Replying is now the end goal.