@_dotvader
Joined May 2014
  • Tweets63
  • Following167
  • Followers95
2Media
Bernard Wagner retweeted
iosiro
@iosiro_securityFeb 10
🚀 Big news for the @arbitrum ecosystem! Introducing arbos-foundry – a fork of Foundry that brings native support for testing Stylus programs. Developed by iosiro's @_dotvader for the Stylus Sprint, it brings the dev experience you love to the Stylus world.
3
5
2
31
1,543
Bernard Wagner retweeted
Arbitrum
@arbitrum31 Jan 2025
Arbitrum is about to level up like no other EVM chain. 17 teams have just secured 5M ARB to innovate with Rust on Arbitrum.
39
63
13
595
109,989
Bernard Wagner retweeted
iosiro
@iosiro_security9 Oct 2023
Our latest bug report to @optimismFND in their sequencer stack allowed censoring of over 1.3m accounts for an arbitrary period of time. Affected protocols included: @LayerZero_Labs @StargateFinance @HopProtocol @SynapseProtocol @AcrossProtocol + more. 👇 iosiro.com/blog/optimism-cen…
1
7
1
27
3,508
Bernard Wagner retweeted
iosiro
@iosiro_security2 Dec 2022
We reported an issue in the @nethermind client that could have led to a consensus failure w/ other Ethereum clients. Bounties were awarded by @ethdotorg and @GnosisDAO. Another big one for @pleasew8t! Details: iosiro.com/blog/nethermind-m…

Nethermind ModExp Out of Memory Consensus Issue | iosiro

iosiro reported a consensus breaking bug in the Nethermind client. The bug was awarded with bounties from both the Ethereum Foundation, as well as Gnosis.

iosiro.com
6
3
107
Bernard Wagner retweeted
iosiro
@iosiro_security12 Oct 2022
We recently disclosed a high risk double-spend vulnerability in @AcrossProtocol's bridge relayer infrastructure. No user funds were at risk! The issue was fixed and awarded with a $90,000 🪲 bounty. Read all the juicy details here: iosiro.com/blog/high-risk-bu…
3
20
4
69
Bernard Wagner retweeted
Immunefi
@immunefi14 Jun 2021
We helped @AshiqAmien disclose a critical bug in @88mphapp. At least $6.5m of funds could've been stolen by attackers. That's no longer possible. Funds were whitehacked from the contract and returned to users. Bug bounties work. Read the postmortem: medium.com/immunefi/88mph-fu…

88mph Function Initialization Bugfix Review

Summary

medium.com
2
14
2
30
Bernard Wagner retweeted
iosiro
@iosiro_security5 May 2021
We've just open-sourced Baserunner - a tool to explore and exploit Firebase datastores iosiro.com/blog/baserunner-e…
4
1
6
Bernard Wagner retweeted
iosiro
@iosiro_security21 Apr 2021
If you're a pentester and interested in smart contract security, our latest blog post is for you: iosiro.com/blog/smart-contra…
8
11
Bernard Wagner retweeted
Jedri Visser@jedrivisser28 Feb 2019
Try out the #Android #FIDO2 APIs with this blog post and sample code medium.com/@jedri/android-fi…
4
1
8
Results of some late night source code reading: helm.sh/blog/chartmuseum-sec… and helm.sh/blog/helm-security-n… Awesome work by the @helmpack team, they made the disclosure process exciting and rewarding by responding to and fixing the issues in record time.

ChartMuseum Vulnerability: Authorization Bypass [CVE-2019-1000009] | Helm

Security researcher Bernard Wagner of Entersekt discovered a vulnerability in ChartMuseum, impacting all versions of ChartMuseum between ChartMuseum >=0.1.0 and < 0.8.1. A specially crafted chart...

helm.sh
12
1
23
😭🤷‍♂️ xitter.cf/axi0mx/status/95136369…
axi0mX
@axi0mX11 Jan 2018
iOS downgrade party is over. It was nice while it lasted.
2
2
The irony. #iamroot
3
Folks from @mwrlabs were back at it. This time, they exploited Internet Browser on the #Galaxy S8. To the disclosure room for details! #MP2O
14
27
Confirmed! @mwrlabs used 5 logic bugs in #Huawei apps to escape browser sandbox & leak data. Earn $25K & 10 Master of Pwn points. #MP2O
31
2
54
Bernard Wagner retweeted
Sagi Shahar@s4gi_26 Sep 2017
Have a crack at my latest hacking VM challenge. Good luck! github.com/sagishahar/challe…

GitHub - sagishahar/challenges: Hacking challenges

Hacking challenges. Contribute to sagishahar/challenges development by creating an account on GitHub.

github.com
3
9
Wow. @mj0011sec did it. Used heap overflow in Edge, type confusion in kernel, & uninit buffer in VMware for complete virtual machine escape.
8
315
41
359
Bernard Wagner retweeted
Frida@fridadotre19 Feb 2017
Frida 9.1.7 is out with Android N support, full ART compatibility, Stalker improvements, better Interceptor on arm64, and Xposed interop 🎉
40
1
49
Fixed link. iOS 9.1 Home Depot Jailbreak offsets for iPhone 4S and iPad mini reddit.com/r/jailbreak/comme…
Bernard Wagner retweeted
dragosr
@dragosr20 Jan 2017
local wifi can access any file including dropbox etc... on LG G3/G4/G5 if they know name goo.gl/SsXikc goo.gl/q9MMNx
1
19
1
18
Why so Cirrus? LG SmartShare.Cloud Vulns: labs.mwrinfosecurity.com/adv… labs.mwrinfosecurity.com/adv…
9
5
Load more