KYC

@r0h1th

Member since: January 29, 2022

India Available for hire

Rank164

Reputation521

Paid Reports4

AboutReports (4)Influenced Programs (31)Achievements (2)

Cybersecurity Researcher | Web Application Pentester | Web3 Smart Contract Auditor

I focus on identifying high-impact vulnerabilities in web applications and decentralized systems, with an emphasis on issues that emerge from complex application behavior rather than surface-level testing.

Consistently focused on depth, not breadth.

Reports

NameCreated onSeverityBounty

Cross-Chain Token Reception Permanently Broken on Spoke Chains - totalBridgedOut Underflow in _credit

Company: OverlayerProgram: Overlayer SC DualDefense Audit

CompanyOverlayer

ProgramOverlayer SC DualDefense Audit

Created on Mar 28 2026

Severity

Critical

Bounty$68.97

Own articles

Overly Permissive Azure SAS TokenA single API call handed every registered user a Read/Write/Delete/List SAS token for an entire healthcare document container. Here’s my write-up on how I discovered this critical vulnerability during a recent penetration testing engagement.

Zero-Click Account TakeoverOne accented letter in a domain name was all it took. I could log into someone else’s account, then quietly have their password-reset link delivered straight to my own inbox. No clicks from them. No phishing. Just a look-alike domain and a flaw in how emails were compared.

Paid Reports (4)

Critical2

High0

Medium1

Low0

None1

Hall of fame

Plasbit Hall of Fame

Streak

2 months streak!

Aug

Sep

Oct

Nov

Dec

Jan

Feb

Mar

Apr

May

Jun

Jul

Skills

Websmart contractappsotherblockchain

Achievements (2) View all

Influenced Programs (31) View all