Security Researcher | Top 20 Chrome VRP Researcher (2022/2024)
Joined December 2018
- Tweets113
- Following419
- Followers1.1K
- Likes837
100/127 CVEs are reported by Google.
Google’s internal tools kills the game
chromereleases.googleblog.co…
whale is back 🐋
🚀 DeepSeek-V4 Preview is officially live & open-sourced! Welcome to the era of cost-effective 1M context length.
🔹 DeepSeek-V4-Pro: 1.6T total / 49B active params. Performance rivaling the world's top closed-source models.
🔹 DeepSeek-V4-Flash: 284B total / 13B active params. Your fast, efficient, and economical choice.
Try it now at chat.deepseek.com via Expert Mode / Instant Mode. API is updated & available today!
📄 Tech Report: huggingface.co/deepseek-ai/D…
🤗 Open Weights: huggingface.co/collections/d…
1/n
𝗖𝗮𝗻 𝗔𝗜 𝗿𝗲𝗽𝗹𝗮𝗰𝗲 𝘀𝗲𝗻𝗶𝗼𝗿 𝗮𝘂𝗱𝗶𝘁𝗼𝗿𝘀/𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗿𝗲𝘀𝗲𝗮𝗿𝗰𝗵𝗲𝗿𝘀?
We re-evaluated @OpenAI's EVMBench with real-world on-chain incidents.
Paper: arxiv.org/abs/2603.10795
Are AI agents ready for detecting and exploiting smart contract vulnerabilities?
We re-evaluated @OpenAI's EVMbench with a contamination-free dataset of real-world hacks.
Our data shows different results. 🧵
Paper: arxiv.org/abs/2603.10795
ret2happy retweeted
Introducing Claude Code Security, now in limited research preview.
It scans codebases for vulnerabilities and suggests targeted software patches for human review, allowing teams to find and fix issues that traditional tools often miss.
Learn more: anthropic.com/news/claude-co…
Incredible. OpenAI handles 800M users requests with only a single primary Postgres and 50 relicas.
@PostgreSQL has long powered core @OpenAI products like ChatGPT and the API. Over the past year, our production load grew 10× and keeps rising. Today we run a single primary with nearly 50 read replicas in production, delivering low double-digit millisecond p99 client-side latency and five-nines availability. In our latest OpenAI Engineering blog, we unpack the optimizations we made to to scale @Azure PostgreSQL to millions of queries per second for more than 800M ChatGPT users. Check out the full post here: openai.com/index/scaling-pos…
Agentic ProbLLMs: Exploiting AI Computer-Use and Coding Agents
media.ccc.de/v/39c3-agentic-…
Given the recent Balancer/Yearn exploits, imagine what on-chain miracles we’d see if Lazarus started developing an LLM for automated attacks. In addition, they should cite the A1 preprint by @lzhou1110, as it is the first work for on-chain AEG.
New on our Frontier Red Team blog: We tested whether AIs can exploit blockchain smart contracts.
In simulated testing, AI agents found $4.6M in exploits.
The research (with @MATSprogram and the Anthropic Fellows program) also developed a new benchmark: red.anthropic.com/2025/smart…
Having witnessed your dedication over these years, I hope the future brings you even greater opportunities!
Since y'all spammed my timeline full of #Ethereum existential crises, here's a letter I sent to EF leadership in a year and half ago 😬.
(link in next post because Twitter...)
ret2happy retweeted
🔺iPhone models announced today include Memory Integrity Enforcement, the culmination of an unprecedented design and engineering effort that we believe represents the most significant upgrade to memory safety in the history of consumer operating systems. security.apple.com/blog/memo…
ret2happy retweeted
ipcz bug can allow renderer duplicate browser process handle to escape sandbox (reward: $250000) crbug.com/412578726
ret2happy retweeted
Team Shellphish came in 5th place in AIxCC! It took an incredible amount of work and 2 years of dedication from all of my amazing team members.
Please check out our CRS ARTIPHISHELL Open Source now on GitHub!
github.com/shellphish/artiph…
itw [sbx escape] [ipcz]
Patch link: chromium-review.googlesource…
ret2happy retweeted
konata.github.io/posts/samsu…
Samsung’s ISVP: Betraying the Trust of Security Researchers
@SamsungMobile
ret2happy retweeted
This is big ..😜 oligo.security/blog/airborne
