Excited to share my research on the Polygon to Ethereum PoS bridge, in which I have found a consensus bypass vulnerability that puts billions of dollars at risk. Thank you Immunefi team and Polygon team for the rapid response, professional joint work and quick patching.

This consensus bypass vulnerability is so elegant && crazy! niv BlueHat IL

While working with one of our high-net-worth partners, we came across a Ledger HW.1 with millions of $ worth of Bitcoin that could not have been retrieved. We found a way to help retrieve the funds and thought to share the story with others. 🧵1/5

I'm heading to DEFCON & BlackHat in Vegas this week. If you're into iOS or Android vulnerability research, let's connect and meet-up.

I will be in #OffensiveCon24 next week. If you're into iOS or Android vulnerability research and exploitation, let's meet up for drinks :)

My team is going to be in DEFCON & BlackHat this week. If you're into iOS or Android vulnerability research, we would love to meet-up! Feel free to DM me

pwned

# ./pasten just ransomwared the The Microsoft Garage #bluebadge.

Shameless self promotion: you can find my #eMMC talk slides (#BlueHatIL version) here: github.com/oranav/emmc-ta… Also, the demo gods are obviously in my favor as it's the second time it worked flawlessly on stage ;)

When you hear Saar Amar talking about exploiting #WSL you can sense that nobody is as excited as him about RE and vulnerability research and never will be