Results of some late night source code reading: helm.sh/blog/chartmuse… and helm.sh/blog/helm-secu… Awesome work by the Helm team, they made the disclosure process exciting and rewarding by responding to and fixing the issues in record time.

If you're a pentester and interested in smart contract security, our latest blog post is for you: iosiro.com/blog/smart-con…

We've just open-sourced Baserunner - a tool to explore and exploit Firebase datastores iosiro.com/blog/baserunne…

We helped toastedsteaksandwich disclose a critical bug in ve88mph 🛹. At least $6.5m of funds could've been stolen by attackers. That's no longer possible. Funds were whitehacked from the contract and returned to users. Bug bounties work. Read the postmortem: medium.com/immunefi/88mph…

We recently disclosed a high risk double-spend vulnerability in Across's bridge relayer infrastructure. No user funds were at risk! The issue was fixed and awarded with a $90,000 🪲 bounty. Read all the juicy details here: iosiro.com/blog/high-risk…

We reported an issue in the client that could have led to a consensus failure w/ other Ethereum clients. Bounties were awarded by ethereum.org Community and @GnosisDAO. Another big one for Jason Matthyser! Details: iosiro.com/blog/nethermin…

Our latest bug report to @optimismFND in their sequencer stack allowed censoring of over 1.3m accounts for an arbitrary period of time. Affected protocols included: LayerZero Labs Stargate HopProtocol Synapse Labs Across + more. 👇 iosiro.com/blog/optimism-…

Arbitrum is about to level up like no other EVM chain. 17 teams have just secured 5M ARB to innovate with Rust on Arbitrum.

🚀 Big news for the Arbitrum ecosystem! Introducing arbos-foundry – a fork of Foundry that brings native support for testing Stylus programs. Developed by iosiro's Bernard Wagner for the Stylus Sprint, it brings the dev experience you love to the Stylus world.

Why so Cirrus? LG SmartShare.Cloud Vulns: labs.mwrinfosecurity.com/advisories/pat… labs.mwrinfosecurity.com/advisories/lg-…

local wifi can access any file including dropbox etc... on LG G3/G4/G5 if they know name goo.gl/SsXikc goo.gl/q9MMNx

Fixed link. iOS 9.1 Home Depot Jailbreak offsets for iPhone 4S and iPad mini reddit.com/r/jailbreak/co…

Frida 9.1.7 is out with Android N support, full ART compatibility, Stalker improvements, better Interceptor on arm64, and Xposed interop 🎉

Wow. mj0011 did it. Used heap overflow in Edge, type confusion in kernel, & uninit buffer in VMware for complete virtual machine escape.

Have a crack at my latest hacking VM challenge. Good luck! github.com/sagishahar/cha…

Confirmed! mwrlabs used 5 logic bugs in #Huawei apps to escape browser sandbox & leak data. Earn $25K & 10 Master of Pwn points. #MP2O

Folks from mwrlabs were back at it. This time, they exploited Internet Browser on the #Galaxy S8. To the disclosure room for details! #MP2O

The irony. #iamroot

😭🤷‍♂️ x.com/axi0mx/status/…