Security researcher, pwning in HypeBoy, KAIST GoN

Joined November 2016
GG 0x4b52
My last CTF has come to an end. I’m very proud that our team, 0x4b52, finished in second place at DEF CON CTF. On the final day, I was a little upset—not only as a CTF player, but also as a professor. As a professor, I always want to tell my students that we should try to live and compete with integrity. As a CTF player, I deeply respect a community where each of us voluntarily chooses to uphold the spirit of the game. I believe we should hack systems, not the rules. Of course, I understand that not everyone may see things the same way. And to be fair, I probably didn’t think this way myself when I was younger. Maybe I’ve just gotten a little older and come to believe that this is the way things should be. Anyway, a huge thank you to BBB for organizing this competition. It is impossible to imagine how much time, effort, and volunteer work it takes to make an event like this possible. If I came across as too aggressive during the game, I’m really sorry. As a team leader, every single tick felt incredibly precious to me. Congratulations to Blue Water. They definitely outperformed us. Some of the team members are my old friends. I really want to congratulate them. Most of all, I’m grateful to my teammates and students. It was truly a pleasure playing together. I had a great time. Thank you, everyone.
1
4
769
Bad auditors miss obvious bugs. We built an AI tool that finds them. Introducing V12: the only autonomous Solidity auditor that actually finds Highs and Criticals. We'll be releasing it for free. V12 finds Crits in Zellic audits, High/Mediums in Cantina, and a bug in Pendle.
78
131
73
723
270,810
Code4rena will run audit contests for free, as public goods. 100% of funds from sponsors will go directly to auditors and judges. We won't take any cut. Why? 1. Competitions are commodities. They're CRUD apps. Why should builders pay premium for a website just to submit bugs? Especially smaller teams without VC funding. 2. Everyone deserves competitions. We tell all our clients to get a competition after their audit. That's because competitions simulate real world conditions, where there's thousands of eyes on a protocol. We want to make competitions as affordable as possible so everyone can get one. 3. It benefits our wardens. In 2021, we invented the competition format. We're still the platform with the largest auditor pool (10,000+ registered). Not only should builders have access to the best security talent, we believe auditors should have opportunities to work with great projects. Opening up our platform benefits our wardens. How will you afford this? Zellic is a profitable business. We make money doing traditional private audits through Zellic and Zenith. This benefits us because: (1) our clients are more secure after they run contests, and (2) Code4rena is a talent pipeline for Zenith. Will you stop maintaining the platform? Of course not. Since we acquired Code4rena, we've shipped several features and have several more already underway. C4 has a dedicated dev team that we're fully committed to. Besides, many of our clients at Zellic use C4. We're incentivized to make sure the platform works well. It's just that now we're allowing everyone to benefit from our investments in Code4rena. In conclusion: Run a contest on Code4rena! We won't take a cut, your prizes will go directly to wardens and judges. For full details, check out our blog post here: zellic.io/blog/code4rena-fre…
98
121
47
758
209,175
Zellic is proud to serve as a whitelisted security provider joining the @UniswapFND Security Fund! We're excited to provide support for the teams building on Uniswap v4 to help them launch secure, innovative projects.
2
9
2,100
Just completed my 10th audit as a contractor @zellic_io and these are my top favourite things about this place: 1. They have a diverse and deep talent pool. World top Web security, Cosmos, Rust, Golang, MOVE. They have experts in every direction I want to move into (pun definitely unintended). 2. I still get to be independent, get my own clients, work with other teams. This keeps me fresh, accountable, and at the top of my game. 3. Every time I have asked for a specific type of contract, it magically shows up in my schedule. These past 4 months I've done countless bridges (EVM, OP, Cosmos), Client implementations in rust, governance, staking, etc. Keen to see what they throw at me next!
4
8
77
7,343
Finally figured out why I've never won a slot game during DEFCON..
8
866
Ethereum watching Bitcoiners build L2s
226
561
147
3,919
532,305
We HypeBoy topped Plaid CTF 2024! 👑 @_Reinose_en @justlikebono @munsiwoo @real_as3617 @mhibio_ptw @howdays1 @stanzz @soo_sudo @n1net4il @1nteger_c @c2w2m2 @pr0cf51 @cmy981224 @csapp3e ironore15 G0RiYa Thanks to the great support from dakuo & hellsonic
14
1
69
9,401
Boom! Seunghyun Lee (@0x10n) of KAIST Hacking Lab was able to successfully demonstrate his exploit of #Google Chrome. He's off to the disclosure call to provide us all the details before we bring in the Google team for disclosure. #Pwn2Own #P2OVancouver
14
1
55
10,173
Apparently, you can now embed any image (or GIF) in your Steam nickname and it’ll show up in the CS2 kick voting menu 🔥 After a few tries, our admin was able to use some random GIF with @s1mpleO as his nickname 😭💀
9
64
12
1,264
171,538
[POC2023] - SPEAKER UPDATE1⃣2️⃣ 💁‍♂️ @c0m0r1, @Xion One shot, Triple kill: Pwning all three Google kernelCTF instances with a single 1-day Linux vulnerability #POC2023
1
6
42
5,994
D-1 til Codegate 2023 Finals :) I'll be there as an author/organizer, see you guys and good luck.
12
1,282
So, codegate finals start in 16 hours, but our reverser got sick 😅 Anyone in Seoul or close by wanna join us? (0rganizers) :p
6
3
16
3,505
상대적으로 적은 수의 팀원에도 불구하고 좋은 팀워크와 기량으로 높은 등수를 거둘 수 있었던 것 같습니다. 리타이어되는 문제가 없어 1인 1문제에 가까워 질수록 점점 어지러워 졌던 것 같네요.. 비행기와 숙박 및 식비 등 대회에만 집중할 수 있도록 큰 도움 주신 분들께 감사드리고 싶습니다.
데프콘 본선을 4위로 마무리했습니다. 14명의 한국인이 모여 만든 낭만은 내년에도 계속됩니다. 😆 HypeBoy got 4th place in #DEFCON 🥳 Keep your eyes on 14 koreans :))) youtu.be/11cta61wi0g
1
28
2,338
On the way to Las Vegas, see you guys at DEFCON!
1
1
19
2,346
The new security patch in Django was disclosed on July 3rd, 2023 🚀 (CVE-2023-36053) This was reported by ME 🔥 And thanks to Django Security Team for kind reception and professional patch. djangoproject.com/weblog/202…
3
1
12
2,863
Two teams (The Goose and NoG) from KAIST got 1st and 4th place from CCE! Congrats!
4
39
5,365
Replying to @diff72840089
@diff72840089 @stanzz @pr0cf51 수고하셨습니다
3
11
2,225
CODEGATE 2023 is finally over, and we have something to share. Hall of Shame codegate2023.org/hall-of-sha…
2
34
16
139
71,146
Codegate CTF 2023 Preliminary is coming!🚀🚀🚀 💰💰💰 Total Prizes (for final) : 86M KRW (approx. $67k) CTFTime: ctftime.org/event/2006 Duration: 2023.06.17 10:00 - 2023.06.18 10:00 (UTC+9) Official website: codegate2023.org Discord: discord.gg/8GdTSKshHm
35
2
27
15,379