bug-bounty622
facebook464
xss316
google152
rce105
microsoft98
apple66
csrf61
account-takeover54
web354
writeup51
exploit42
sqli41
cve37
ssrf35
cloudflare33
dos33
malware29
privilege-escalation29
defi28
smart-contract-vulnerability25
subdomain-takeover24
idor24
clickjacking23
ethereum23
smart-contract23
node22
access-control21
vulnerability-disclosure21
browser20
auth-bypass20
aws19
lfi19
remote-code-execution18
react17
reverse-engineering17
cloud17
oauth16
docker16
cors16
race-condition16
info-disclosure15
solidity14
authentication-bypass14
supply-chain13
phishing13
wordpress12
denial-of-service11
sql-injection11
delegatecall11
0
8/10
bug-bounty
Researcher disclosed two critical bugs in Sei Network's Cosmos blockchain: (1) an ABCI EndBlocker panic triggered via vesting accounts that would halt the chain, and (2) a balance transfer vulnerability in EVM integration allowing arbitrary fund transfers. Both were caught pre-mainnet and awarded $75k and $2M respectively.
cosmos-sdk
blockchain-security
evm-integration
panic-vulnerability
state-machine-bug
vesting-accounts
balance-transfer-vulnerability
abci-hooks
tendermint
denial-of-service
fund-theft
bug-bounty-writeup
Sei Network
Sei Foundation
Cosmos SDK
Geth
Trail of Bits
Immunefi
CVE-2024-XXXXX (implied but not stated)