-
How Veria AI Found an Arbitrary Proof Forgery in Aleo Cayden #zkvm#cryptography#bug-bounty How a weak Fiat-Shamir transcript allowed arbitrary transaction forgery on Aleo, and earned us a $65,000 bounty.
-
Pwning Pydantic's Monty: A $5K Sandbox Escape Owen Kwan #bug-bounty Pydantic offered $5,000 to escape Monty, their Rust-built Python sandbox for AI agents. We chained two GC bugs into a use-after-free and walked away with the bounty.
-
From MCP to Shell
Raymond #rce#bug-bounty How MCP authentication flaws enable RCE in Claude Code, Gemini CLI, and more.