KYC

@mahmadisha

Member since: January 29, 2025

India Available for hire

Rank4350

Reputation105

Paid Reports3

AboutReportsInfluenced Programs (72)Achievements

Cyber Security || Network Pentester || Web Application Pentester || Ethical Hacker || Source Code Review || VAPT || Manual Testing

Reports

NameCreated onSeverityBounty

Improper Private Key Handling Leading to Wallet Compromise

Company: DexLynProgram: DexLyn SCA DualDefense Audit

CompanyDexLyn

ProgramDexLyn SCA DualDefense Audit

Created on Feb 10 2025

Severity

None

Bounty

hidden

Own articles

The Solidity delete TrapExploring a real-world smart contract vulnerability where state machine mismanagement and a 12-week timelock collided to create a complete protocol denial-of-service.

From a Silent Math Error to Certificate BypassBug hunting isn’t always about popping XSS alerts or finding chained SSRFs. Sometimes, the most critical vulnerabilities are hidden deep within the foundational cryptographic parsing logic of an application.

Private $25M Simulation Fork RPC MisconfigurationBug bounty hunting in Web3 isn’t just about analyzing smart contracts for reentrancy or logic flaws. Sometimes, the biggest vulnerabilities hide in the off-chain infrastructure.

Paid Reports (5)

Critical0

High0

Medium1

Low2

None2

Streak

2 months streak!

Jul

Aug

Sep

Oct

Nov

Dec

Jan

Feb

Mar

Apr

May

Jun

Skills

Webotherappssmart contractblockchain

Achievements (1) View all

Influenced Programs (72) View all