'%3e%3cpath%20d='M12.4997%201.33325C10.39%201.33325%208.32772%201.95884%206.5736%203.13091C4.81947%204.30298%203.4523%205.96888%202.64496%207.91796C1.83763%209.86704%201.62639%2012.0118%202.03797%2014.0809C2.44955%2016.15%203.46545%2018.0506%204.95721%2019.5424C6.44897%2021.0342%208.34959%2022.0501%2010.4187%2022.4616C12.4878%2022.8732%2014.6326%2022.662%2016.5816%2021.8546C18.5307%2021.0473%2020.1966%2019.6801%2021.3687%2017.926C22.5408%2016.1719%2023.1663%2014.1096%2023.1663%2011.9999C23.1663%209.17094%2022.0425%206.45783%2020.0422%204.45745C18.0418%202.45706%2015.3287%201.33325%2012.4997%201.33325ZM12.4997%2021.3333C10.6537%2021.3333%208.84922%2020.7859%207.31436%2019.7603C5.7795%2018.7347%204.58322%2017.2771%203.8768%2015.5716C3.17039%2013.8662%202.98555%2011.9896%203.34568%2010.1791C3.70581%208.36859%204.59473%206.70554%205.90002%205.40025C7.20531%204.09496%208.86835%203.20605%2010.6788%202.84592C12.4893%202.48579%2014.3659%202.67063%2016.0714%203.37704C17.7768%204.08346%2019.2345%205.27974%2020.2601%206.8146C21.2856%208.34945%2021.833%2010.154%2021.833%2011.9999C21.833%2014.4753%2020.8497%2016.8492%2019.0993%2018.5996C17.349%2020.3499%2014.975%2021.3333%2012.4997%2021.3333Z'%20fill='white'/%3e%3cpath%20d='M19.167%208.06667C19.042%207.9425%2018.8731%207.8728%2018.697%207.8728C18.5208%207.8728%2018.3519%207.9425%2018.227%208.06667L10.8269%2015.4333L6.82695%2011.4333C6.70495%2011.3016%206.53562%2011.2237%206.35621%2011.2169C6.1768%2011.21%206.00201%2011.2747%205.87028%2011.3967C5.73856%2011.5187%205.66069%2011.688%205.65382%2011.8674C5.64694%2012.0468%205.71162%2012.2216%205.83362%2012.3533L10.8269%2017.3333L19.167%209.01333C19.2294%208.95136%2019.279%208.87762%2019.3129%208.79638C19.3467%208.71514%2019.3642%208.62801%2019.3642%208.54C19.3642%208.45199%2019.3467%208.36485%2019.3129%208.28361C19.279%208.20237%2019.2294%208.12864%2019.167%208.06667Z'%20fill='white'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_2790_31187'%3e%3crect%20width='24'%20height='24'%20fill='white'%20transform='translate(0.5)'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
'%3e%3cg%20filter='url(%23filter0_d_2685_55266)'%3e%3cpath%20d='M30.6654%2016L27.412%2012.28L27.8654%207.36L23.052%206.26667L20.532%202L15.9987%203.94667L11.4654%202L8.94536%206.25333L4.13203%207.33333L4.58536%2012.2667L1.33203%2016L4.58536%2019.72L4.13203%2024.6533L8.94536%2025.7467L11.4654%2030L15.9987%2028.04L20.532%2029.9867L23.052%2025.7333L27.8654%2024.64L27.412%2019.72L30.6654%2016ZM13.452%2022.2933L8.38536%2017.2133L10.3587%2015.24L13.452%2018.3467L21.252%2010.52L23.2254%2012.4933L13.452%2022.2933Z'%20fill='%23050505'/%3e%3c/g%3e%3cpath%20d='M13.452%2022.2933L8.38536%2017.2133L10.3587%2015.24L13.452%2018.3467L21.252%2010.52L23.2254%2012.4933L13.452%2022.2933Z'%20fill='white'/%3e%3c/g%3e%3cdefs%3e%3cfilter%20id='filter0_d_2685_55266'%20x='-2.66797'%20y='0'%20width='37.3333'%20height='36'%20filterUnits='userSpaceOnUse'%20color-interpolation-filters='sRGB'%3e%3cfeFlood%20flood-opacity='0'%20result='BackgroundImageFix'/%3e%3cfeColorMatrix%20in='SourceAlpha'%20type='matrix'%20values='0%200%200%200%200%200%200%200%200%200%200%200%200%200%200%200%200%200%20127%200'%20result='hardAlpha'/%3e%3cfeOffset%20dy='2'/%3e%3cfeGaussianBlur%20stdDeviation='2'/%3e%3cfeComposite%20in2='hardAlpha'%20operator='out'/%3e%3cfeColorMatrix%20type='matrix'%20values='0%200%200%200%201%200%200%200%200%201%200%200%200%200%201%200%200%200%200.4%200'/%3e%3cfeBlend%20mode='normal'%20in2='BackgroundImageFix'%20result='effect1_dropShadow_2685_55266'/%3e%3cfeBlend%20mode='normal'%20in='SourceGraphic'%20in2='effect1_dropShadow_2685_55266'%20result='shape'/%3e%3c/filter%3e%3cclipPath%20id='clip0_2685_55266'%3e%3crect%20width='32'%20height='32'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Brazil'%3e%3cpath%20d='M4.46645%200.263608C5.05931%200.46692%205.62331%200.747967%206.14406%201.09958C6.87951%200.909295%207.63573%200.813701%208.39482%200.815061C9.17876%200.815061%209.93507%200.914163%2010.644%201.09878C11.1646%200.747509%2011.7283%200.466733%2012.3208%200.263608C12.8711%200.0741962%2013.655%20-0.232699%2014.1208%200.289183C14.4366%200.644031%2014.5155%201.23864%2014.5716%201.69259C14.6347%202.19929%2014.6497%202.85943%2014.484%203.51478C15.1179%204.34356%2015.5%205.33218%2015.5%206.40951C15.5%208.04149%2014.6269%209.45849%2013.3345%2010.4399C12.7125%2010.9063%2012.0227%2011.2719%2011.2898%2011.5236C11.4587%2011.9153%2011.5527%2012.3484%2011.5527%2012.8032V15.2008C11.5527%2015.4128%2011.4695%2015.616%2011.3215%2015.7659C11.1734%2015.9158%2010.9726%2016%2010.7632%2016H6.02643C5.81705%2016%205.61625%2015.9158%205.46819%2015.7659C5.32014%2015.616%205.23697%2015.4128%205.23697%2015.2008V14.4088C4.48303%2014.5023%203.85067%2014.4192%203.31304%2014.1882C2.75094%2013.9468%202.35937%2013.5728%202.0649%2013.2148C1.78543%2012.8759%201.4807%2012.1119%201.04017%2011.9632C0.941788%2011.93%200.850818%2011.8776%200.772457%2011.8088C0.694097%2011.7401%200.629882%2011.6564%200.583477%2011.5625C0.48976%2011.3729%200.47428%2011.1534%200.540444%2010.9522C0.606607%2010.7511%200.748995%2010.5847%200.936282%2010.4899C1.12357%2010.395%201.34042%2010.3793%201.53912%2010.4463C2.0649%2010.6237%202.40753%2011.0074%202.642%2011.3158C3.02094%2011.8114%203.32883%2012.4587%203.92882%2012.7169C4.17593%2012.8232%204.53829%2012.8927%205.10513%2012.8144L5.23697%2012.7872C5.23847%2012.3523%205.32794%2011.9222%205.49986%2011.5236C4.76691%2011.2719%204.07709%2010.9063%203.45515%2010.4399C2.16279%209.45849%201.28965%208.04229%201.28965%206.40951C1.28965%205.33378%201.67096%204.34596%202.30332%203.51798C2.13753%202.86263%202.15174%202.20089%202.2149%201.69339L2.21884%201.66302C2.27648%201.19788%202.34358%200.650425%202.66568%200.289183C3.13147%20-0.232699%203.91619%200.0749955%204.46566%200.264408L4.46645%200.263608Z'%20fill='white'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3010_8995'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
AboutReports (17)Influenced Programs (47)Achievements (3)
Hello Friend
Reports
NameCreated onSeverityBounty
IBC refund on acknowledgement and timeout can unlock module native token for non wrapped packets
Company: ZIGChainProgram: ZIGChain Code DualDefense Audit
CompanyZIGChain
Created on Jan 04 2026
Severity Critical
Bounty$443
Destination-local totalBridgedOut underflow on first inbound can permanently strand bridged funds
Company: OverlayerProgram: Overlayer SC DualDefense Audit
CompanyOverlayer
Created on Mar 28 2026
Severity Critical
Bounty$68.97
GLV Pricing Captures Pending Insurance ValueTechnical writeup of a confirmed GLV share pricing vulnerability in 0xMarkets, where new depositors could mint excess shares before a pending insurance recapitalization was settled, capturing value from existing holders. The article explains the root cause, exploit flow, economic impact, proof of concept, severity dispute, and mitigation.
WNT Fee Reimbursement Overpays SubaccountsTechnical writeup of a confirmed High severity vulnerability in the 0xMarkets subaccount flow. WNT collateral orders allowed an authorized subaccount to receive reimbursement for an execution fee already funded by the main account, causing repeatable value leakage within configured limits.
Pending 0xMarkets Requests Inflated SharesTechnical writeup of a confirmed High severity vulnerability in CarthaVault. Pending 0xMarkets deploy and recall requests were omitted from TVL, allowing an unprivileged depositor to mint inflated shares and capture value from existing LPs after settlement.
Paid Reports (17)
Critical7
High7
Medium2
Low1
None0
Hall of fame
Streak
2 months streak!
SepOctNovDecJan
FebMarAprMayJunJulAug
Skills
Achievements (3) View all
Fatality
First Blood
DualDefense Crasher
Influenced Programs (47) View all
